# Geoip not apeearing at indexes
**URL:** https://discuss.elastic.co/t/geoip-not-apeearing-at-indexes/153815
**Category:** Logstash
**Created:** [October 24, 2018, 1:43pm UTC](https://discuss.elastic.co/t/geoip-not-apeearing-at-indexes/153815 "2018-10-24T13:43:14Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@paulo\_bruck](https://discuss.elastic.co/u/paulo_bruck)
#### Post date: [October 24, 2018, 1:43pm UTC](https://discuss.elastic.co/t/geoip-not-apeearing-at-indexes/153815/1 "2018-10-24T13:43:15Z")
Hy all
I have read a lot of things about this subject, but none of them solve my problem.
Using kibana,elasticsearch and logstash v6.4.2-1
Iniciating logstash appears this:
[2018-10-24T10:00:15,816][INFO][logstash.outputs.elasticsearch] Attempting to install template {:manage\_template=\>{"template"=\>"logstash-_", "version"=\>60001, "settings"=\>{"index.refresh\_interval"=\>"5s"}, "mappings"=\>{"default"=\>{"dynamic\_templates"=\>[{"message\_field"=\>{"path\_match"=\>"message", "match\_mapping\_type"=\>"string", "mapping"=\>{"type"=\>"text", "norms"=\>false}}}, {"string\_fields"=\>{"match"=\>"_", "match\_mapping\_type"=\>"string", "mapping"=\>{"type"=\>"text", "norms"=\>false, "fields"=\>{"keyword"=\>{"type"=\>"keyword", "ignore\_above"=\>256}}}}}], "properties"=\>{"@timestamp"=\>{"type"=\>"date"}, "@version"=\>{"type"=\>"keyword"}, **"geoip"=\>{"dynamic"=\>true, "properties"=\>{"ip"=\>{"type"=\>"ip"}, "location"=\>{"type"=\>"geo\_point"}, "latitude"=\>{"type"=\>"half\_float"}, "longitude"=\>{"type"=\>"half\_float"}}}}}}}}**
**[2018-10-24T10:00:16,343][INFO][logstash.filters.geoip] Using geoip database {:path=\>"/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-filter-geoip-5.0.3-java/vendor/GeoLite2-City.mmdb"}**
As I can see logstash has a dinamic template that is inserting geoip\_point.
but its not apeears at indexes, and I have already drop all indexes and start a new one.
Indexes show me:
"geoip": {
"properties": {
"city\_name": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"continent\_code": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"country\_code2": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"country\_code3": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"country\_name": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"dma\_code": {
"type": "long"
},
"ip": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"latitude": {
"type": "float"
},
**"location": {**
\*\* "properties": {\*\*
\*\* "lat": {\*\*
\*\* "type": "float"\*\*
\*\* },\*\*
\*\* "lon": {\*\*
\*\* "type": "float"\*\*
\*\* }\*\*
\*\* }\*\*
\*\* },\*\*
"longitude": {
"type": "float"
},
"postal\_code": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"region\_code": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"region\_name": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"timezone": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
}
}
},
But when I try to insert a map at kibana, it appears this message:
The "firewall-\*" index pattern does not contain any of the following field types: geo\_point
Problem as am I new at ELK I have been nort seen solutions for it..80)
Any help would be very appreciated 8)
---
### Author:  [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [October 24, 2018, 1:49pm UTC](https://discuss.elastic.co/t/geoip-not-apeearing-at-indexes/153815/2 "2018-10-24T13:49:13Z")
The standard index template Logstash comes with does map this correctly, but it does only apply to indices matching the pattern `logstash-*`. As you have created an index with a name not matching this, default mappings are applied which is why the `lat` and `lon` fields are identified as floats. If you copy the default Logstash template and change it to apply to a pattern that matches your indices and then import it into Elasticsearch, the problem should be solved for any new index that is created.
---
### Author:  [@paulo\_bruck](https://discuss.elastic.co/u/paulo_bruck)
#### Post date: [October 24, 2018, 2:14pm UTC](https://discuss.elastic.co/t/geoip-not-apeearing-at-indexes/153815/3 "2018-10-24T14:14:13Z")
Thanks for solution Christian
best regards
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 21, 2018, 2:14pm UTC](https://discuss.elastic.co/t/geoip-not-apeearing-at-indexes/153815/4 "2018-11-21T14:14:16Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.