I have used packetbeat and logstash to read data and have downloaded the geolitecity.dat, but I could still not make any tile map in kibana as it still limits me to the option of client location as the geohash even I have updated the logstash conf file to include ip as a geoip. How can I make ip to be shown in tile map?
input{
beats{
port => 5044
}
udp{
port => 514
}
tcp{
port => 8080
}
}
filter{
geoip{
source => "ip"
target => "geoip"
database => "C:\logstash\GeoLiteCity.dat"
}
}
output{
stdout{codec=>rubydebug}
elasticsearch{
hosts => "172.16.1.209:9200"
index => "packetbeat-%{+YYYY.MM.dd}"
template => "C:/logstash/packetbeat.json"
template_overwrite => true
}
}