Geohash key missing

The Geohash key is missing in the data. This prevents me from plotting the map. I am using 5.* version for ELK. I have all the other geo-location data populated except the geohash. Below is my geoip filter conf.

filter {
geoip {
source => "[pubIPAddress]"
database => "/etc/logstash/GeoLite2-City_20170905/GeoLite2-City.mmdb"
}
}

Hi Piyush,

is the field in your document really called [pubIPAddress] (including the brackets?), or was this just a placeholder you used in this example instead of your real fieldname? Because this sounds a bit like a weird name for a field :slight_smile:

Cheers,
Tim

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.