# Geoip.location is not displaying in kibana when set up in logstash conf
**URL:** https://discuss.elastic.co/t/geoip-location-is-not-displaying-in-kibana-when-set-up-in-logstash-conf/206980
**Category:** Logstash
**Created:** [November 7, 2019, 3:38pm UTC](https://discuss.elastic.co/t/geoip-location-is-not-displaying-in-kibana-when-set-up-in-logstash-conf/206980 "2019-11-07T15:38:00Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Apollyon](https://discuss.elastic.co/u/Apollyon)
#### Post date: [November 7, 2019, 3:38pm UTC](https://discuss.elastic.co/t/geoip-location-is-not-displaying-in-kibana-when-set-up-in-logstash-conf/206980/1 "2019-11-07T15:38:01Z")
hello, I am on ELK 7.4.
When using **geoip** in a Logstash conf the **geoip.location** doesn't appear to be displayed in the index fields in Kibana.
Below is the Logstash conf - showing the fields filter input under the **geoip** filter. (if this is now included then the fields do not show and are unable to see displayed geo data in Kibana - but the **geoip.location** is not shown in the index mapping - so am creating the new coordinates field).
```
input {
file {
path=>"/route/to/file/*.csv"
start_position=>"beginning"
}
}
filter {
csv {
separator=>","
columns=>["Id","Date/Time","SenderIP","Workload"]
}
geoip {
source => ["SenderIP"]
target => "geoip"
fields => ["continent_code", "longitude", "city_name", "region_code", "country_name", "location", "ip", "latitude"]
add_field => ["[geoip][coordinates]", "%{[geoip][longitude]}" ]
add_field => ["[geoip][coordinates]", "%{[geoip][latitude]}" ]
}
mutate {
convert => ["[geoip][coordinates]", "float" ]
}
}
output {
elasticsearch {
hosts => ["localhost:9200"]
index => "info_file"
manage_template =>false
}
}
```
When saying **geoip.location** , the data is then displayed in to two separate fields of **geoip.location.lon** and **geoip.location.lat** , instead of showing, for an example, as -
```
geoip.location {
lon: 0.0001
lat: 0.0001
}
```
I am able to add\_field and mutate this into an new field, i.e. **geoip.coordinates** (as seen in the above conf). and that will be added to the index mapping.
Is there a way to format this into a index template so that it will be able to be formatted correctly for the following/ future creation of index's, being able to use **geoip.location** correctly?
Also, when creating a point/ visualization on the maps function in Kibana, the index in question is not displayed. Am I missing a trick here? or if this because of the above? with the non matching of **geoip.location** and therefore **geo\_point** formation type?
Thank you!
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [November 7, 2019, 4:24pm UTC](https://discuss.elastic.co/t/geoip-location-is-not-displaying-in-kibana-when-set-up-in-logstash-conf/206980/2 "2019-11-07T16:24:54Z")
You need to use an index template. It could look very much like the [default template for logstash-\*](https://github.com/logstash-plugins/logstash-output-elasticsearch/blob/master/lib/logstash/outputs/elasticsearch/elasticsearch-template-es7x.json), which defines geoip.location as a geo\_point. Just change the index\_patterns field.
---
### Author:  [@Apollyon](https://discuss.elastic.co/u/Apollyon)
#### Post date: [November 7, 2019, 4:57pm UTC](https://discuss.elastic.co/t/geoip-location-is-not-displaying-in-kibana-when-set-up-in-logstash-conf/206980/3 "2019-11-07T16:57:16Z")
Thank you @Badger!
Can't believe I missed this.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 5, 2019, 5:07pm UTC](https://discuss.elastic.co/t/geoip-location-is-not-displaying-in-kibana-when-set-up-in-logstash-conf/206980/4 "2019-12-05T17:07:13Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.