geoip{
source => "IP"
}
how can i covert geo ip to geo point, as map is not accepting geoip
what i need to add in logstash or fields.yml, i am using elk stack 7.X
Need help
Hello Rushabh,
We have a blog covering exactly this subject here. It's a few years old but still worth a look. You might also want to take a look at our latest GeoIP Ingest docs here. If the idea of ingest nodes is new to you, I'd back up and start with our docs around those.
Regards,
Aaron
geoip{
source => "IP"
fields => ["longitude","latitude"]
target => "client.geo.location"
}
Used above config for geoip as per doc, fetched longitude and latitude and mapped it to a geo_point(client.geo.location) still i dont see it in maps of kibana it says no results found after i select the field client.geo.location which is a geo_point
In kibana the field client.geo.location looks like:
