# Geoip filter logstash
**URL:** https://discuss.elastic.co/t/geoip-filter-logstash/52128
**Category:** Logstash
**Created:** [June 7, 2016, 9:29pm UTC](https://discuss.elastic.co/t/geoip-filter-logstash/52128 "2016-06-07T21:29:41Z")
**Posts on this page:** 13
**Page:** 1
### Author:  [@bishaka](https://discuss.elastic.co/u/bishaka)
#### Post date: [June 7, 2016, 9:29pm UTC](https://discuss.elastic.co/t/geoip-filter-logstash/52128/1 "2016-06-07T21:29:41Z")
Hi,
I am trying to show location of users in the Kibana Tile Map. How do i do it using the Geoip filter? Can someone point me to some good resource?
I have ELK stack setup.
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 7, 2016, 9:44pm UTC](https://discuss.elastic.co/t/geoip-filter-logstash/52128/2 "2016-06-07T21:44:25Z")
Have you read the docs? [https://www.elastic.co/guide/en/logstash/current/plugins-filters-geoip.html](https://www.elastic.co/guide/en/logstash/current/plugins-filters-geoip.html)
---
### Author:  [@bishaka](https://discuss.elastic.co/u/bishaka)
#### Post date: [June 7, 2016, 11:19pm UTC](https://discuss.elastic.co/t/geoip-filter-logstash/52128/3 "2016-06-07T23:19:20Z")
I have read the docs.
I am trying to follow this tutorial
> **[How To Map User Location with GeoIP and ELK (Elasticsearch, Logstash, and...](https://www.digitalocean.com/community/tutorials/how-to-map-user-location-with-geoip-and-elk-elasticsearch-logstash-and-kibana)**
>
> IP Geolocation, the process used to determine the physical location of an IP address, can be leveraged for a variety of purposes, such as content personalization and traffic analysis. In this tutorial, we will show you how to create a visual...
But this link is not working:
curl -XPUT '[http://localhost:9200/\_template/filebeat?pretty](http://localhost:9200/_template/filebeat?pretty)' -d@filebeat-index-template.json
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 7, 2016, 11:21pm UTC](https://discuss.elastic.co/t/geoip-filter-logstash/52128/4 "2016-06-07T23:21:10Z")
Why not, what does it return?
---
### Author:  [@bishaka](https://discuss.elastic.co/u/bishaka)
#### Post date: [June 7, 2016, 11:28pm UTC](https://discuss.elastic.co/t/geoip-filter-logstash/52128/5 "2016-06-07T23:28:49Z")
It's displaying the following message.
Curl: (7) couldn't connect to host
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 7, 2016, 11:29pm UTC](https://discuss.elastic.co/t/geoip-filter-logstash/52128/6 "2016-06-07T23:29:30Z")
Right, so is ES running?
---
### Author:  [@bishaka](https://discuss.elastic.co/u/bishaka)
#### Post date: [June 7, 2016, 11:29pm UTC](https://discuss.elastic.co/t/geoip-filter-logstash/52128/7 "2016-06-07T23:29:58Z")
Yes. ES is running
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 7, 2016, 11:30pm UTC](https://discuss.elastic.co/t/geoip-filter-logstash/52128/8 "2016-06-07T23:30:24Z")
Can you `curl localhost:9200/`
---
### Author:  [@bishaka](https://discuss.elastic.co/u/bishaka)
#### Post date: [June 7, 2016, 11:30pm UTC](https://discuss.elastic.co/t/geoip-filter-logstash/52128/9 "2016-06-07T23:30:52Z")
I get the same message.
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 7, 2016, 11:33pm UTC](https://discuss.elastic.co/t/geoip-filter-logstash/52128/10 "2016-06-07T23:33:28Z")
Then how do you know ES is running?
---
### Author:  [@bishaka](https://discuss.elastic.co/u/bishaka)
#### Post date: [June 7, 2016, 11:39pm UTC](https://discuss.elastic.co/t/geoip-filter-logstash/52128/11 "2016-06-07T23:39:02Z")
i checked with netstat -nltp
and also service elasticsearch status says elasticsearch is running.
I am not sure what could be causing this issue
---
### Author:  [@bishaka](https://discuss.elastic.co/u/bishaka)
#### Post date: [June 7, 2016, 11:41pm UTC](https://discuss.elastic.co/t/geoip-filter-logstash/52128/12 "2016-06-07T23:41:06Z")
Fixed it. It's not suppose to be localhost. So silly of me. Thanks Warkolm!
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 4:54am UTC](https://discuss.elastic.co/t/geoip-filter-logstash/52128/13 "2017-07-06T04:54:17Z")