# Geogip data problem

**URL:** <https://discuss.elastic.co/t/geogip-data-problem/279280>\
**Category:** Logstash\
**Created:** [July 21, 2021, 2:49pm UTC](https://discuss.elastic.co/t/geogip-data-problem/279280 "2021-07-21T14:49:26Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Betorov](https://avatars.discourse-cdn.com/v4/letter/b/ea666f/32.png) [@Betorov](https://discuss.elastic.co/u/Betorov)\
**Post date:** [July 21, 2021, 2:49pm UTC](https://discuss.elastic.co/t/geogip-data-problem/279280/1 "2021-07-21T14:49:26Z")

</div>

Hi evreyone,  
I'am using the geoip filter to get the map value of an ip

```auto
geoip {source => "NATDestinationIP" }
 

```

It works, it create all type geoip (latitude and longitude.....) but when I look these value on kibana they are texts types (and numbers)!!!! I can not create map whit texts value.  
When I want to create a map I can't choose the index pattern i want beacuse there aren't geoip value

This is the problem :

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/e/2e45b83495af91dd7481f7e1deb5120b2f30bc84.png)  
They should be geo data (geopont...)

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [July 21, 2021, 4:53pm UTC](https://discuss.elastic.co/t/geogip-data-problem/279280/2 "2021-07-21T16:53:24Z")

</div>

The default target for a geoip filter is [geoip]. The default [template](https://github.com/logstash-plugins/logstash-output-elasticsearch/blob/476097712b67e0452099769b2c8b0ef6e63e40eb/lib/logstash/outputs/elasticsearch/templates/ecs-disabled/elasticsearch-7x.json#L33) for an elasticsearch output makes [geoip][location] a geo\_point. If you are using a non-default template you will have to include the mapping for [geoip][location] in it.

---

<div class="post-metadata">

**Author:** ![Betorov](https://avatars.discourse-cdn.com/v4/letter/b/ea666f/32.png) [@Betorov](https://discuss.elastic.co/u/Betorov)\
**Post date:** [July 21, 2021, 4:56pm UTC](https://discuss.elastic.co/t/geogip-data-problem/279280/3 "2021-07-21T16:56:15Z")

</div>

Thanks @Badger for your reply.  
I added a teplate one time for this index. But I have deleted this index multiple time

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 18, 2021, 4:56pm UTC](https://discuss.elastic.co/t/geogip-data-problem/279280/4 "2021-08-18T16:56:16Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.