The Geohash key is missing in the data. This prevents me from plotting the map. I am using 5.* version for ELK. I have all the other geo-location data populated except the geohash. Below is my geoip filter conf.
filter {
geoip {
source => "[pubIPAddress]"
database => "/etc/logstash/GeoLite2-City_20170905/GeoLite2-City.mmdb"
}
}
