# Geoip to geopoint in logstash kibana 7.7
**URL:** https://discuss.elastic.co/t/geoip-to-geopoint-in-logstash-kibana-7-7/237032
**Category:** Logstash
**Created:** [June 14, 2020, 5:18pm UTC](https://discuss.elastic.co/t/geoip-to-geopoint-in-logstash-kibana-7-7/237032 "2020-06-14T17:18:29Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@Rushabh\_Doshi](https://discuss.elastic.co/u/Rushabh_Doshi)
#### Post date: [June 14, 2020, 5:18pm UTC](https://discuss.elastic.co/t/geoip-to-geopoint-in-logstash-kibana-7-7/237032/1 "2020-06-14T17:18:29Z")
Hi
I am using the latest 7.7.1 version of elk stack and my logstash geoip snippet looks as below:
if [log\_type] == "querylog" {
grok{
match =\> {"message" =\> "%{TIMESTAMP\_ISO8601:Activity-Time}%{SPACE}USERID=%{QUOTEDSTRING:USERID}%{SPACE}IP="%{IP:IP}"%{SPACE}ACTION=%{QS:ACTION}%{SPACE}URL=%{QS:URL}%{SPACE}DEVICETYPE=%{QS:DEVICETYPE}%{SPACE}KEYS=%{QS:KEYS}"}
}
geoip{
source =\> "IP"
}
}
I get details in kibana discover tab but i cannot visualize it in Maps, somehow Maps in Visualiztion is different then 5.6.16 version where i didnt had to do much straightaway i was getting the visualization as soon as geoip data is discovered,
I do need guidance on what to change in logstash, as i tried targeting it to geo point field of ECS as well but still no visualization i can see even though i selected grid or docs in Maps, please help with the code or guidance
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [June 14, 2020, 5:23pm UTC](https://discuss.elastic.co/t/geoip-to-geopoint-in-logstash-kibana-7-7/237032/2 "2020-06-14T17:23:49Z")
The [default](https://github.com/logstash-plugins/logstash-output-elasticsearch/blob/master/lib/logstash/outputs/elasticsearch/elasticsearch-template-es7x.json) index template, which is applied to logstash-\* (so not an index called logstash) configures [geoip][location] as a geo\_point. Check the [mapping](https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-get-mapping.html) of your index to see if it includes this.
---
### Author:  [@Rushabh\_Doshi](https://discuss.elastic.co/u/Rushabh_Doshi)
#### Post date: [June 17, 2020, 7:30pm UTC](https://discuss.elastic.co/t/geoip-to-geopoint-in-logstash-kibana-7-7/237032/3 "2020-06-17T19:30:20Z")
@Badger I checked the mapping in fields.yml , i have created a field like:
- name: geoip.coordinates
level: core
type: geo\_point
description: Longitude and latitude.
example: '{ "lon": -73.614830, "lat": 45.505918 }'
And my logstash looks like this:
geoip{
source =\> "IP"
target =\> "geoip.coordinates"
}
Kindly help, still i dont see geo point in kibana and another thing is in Maps Visualization what should i select Grid, GeoJson etc. Some how Kibana 5.6.16 was working like a charm for maps, but 7.X has something more to be added
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [June 17, 2020, 9:03pm UTC](https://discuss.elastic.co/t/geoip-to-geopoint-in-logstash-kibana-7-7/237032/4 "2020-06-17T21:03:11Z")
What do you see for that field when you query elasticsearch about the mapping for the index?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 15, 2020, 9:03pm UTC](https://discuss.elastic.co/t/geoip-to-geopoint-in-logstash-kibana-7-7/237032/5 "2020-07-15T21:03:20Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.