# Geop.location not of geo\_pooint. elastic.co 5.6.4 on RPI3
**URL:** https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416
**Category:** Elasticsearch
**Created:** [May 27, 2018, 7:42am UTC](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416 "2018-05-27T07:42:20Z")
**Posts on this page:** 16
**Page:** 1
### Author:  [@bruno-d](https://discuss.elastic.co/u/bruno-d)
#### Post date: [May 27, 2018, 7:42am UTC](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416/1 "2018-05-27T07:42:20Z")
Hey, i did some change, renew my conf and my MAP is gone. No field of geo\_point type.
I use the geoip pipeline filter and all is running fine except the map.
GET /logstash-2018.05/\_mapping return a struct showing that geoip has a field name location with lat and lon. (see capture) they are filled correctly by the filter also.
I read many threads and in one that i could modify the logstash indice and delete the index then i will recreate. I apply the following
PUT \_template/logstash
{
"template": "logstash-\*",
"settings": {
"number\_of\_replicas": 1,
"number\_of\_shards": 1
},
"mappings": {
"syslog": {
"dynamic": "true",
"properties": {
"geoip": {
"dynamic": true,
"properties": {
"location": {
"type": "geo\_point"
}
}
}
}
}
}
and then delete the index pattern and recreate again. it failed.
Can someone help ?
thanks
---
### Author:  [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [May 27, 2018, 8:11am UTC](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416/2 "2018-05-27T08:11:11Z")
Please don't post images of text as they are hardly readable and not searchable.
Instead paste the text and format it with `` icon. Check the preview window.
Could you share the full mapping?
---
### Author:  [@bruno-d](https://discuss.elastic.co/u/bruno-d)
#### Post date: [May 27, 2018, 10:36am UTC](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416/3 "2018-05-27T10:36:49Z")
Format error
---
### Author:  [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [May 28, 2018, 4:42am UTC](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416/4 "2018-05-28T04:42:14Z")
Please format your code, logs or configuration files using `` icon as explained in [this guide](https://discuss.elastic.co/t/about-the-elasticsearch-category/21) and not the citation button. It will make your post more readable.
Or use markdown style like:
````
```
CODE
```
````
There's a live preview panel for exactly this reasons.
Lots of people read these forums, and many of them will simply skip over a post that is difficult to read, because it's just too large an investment of their time to try and follow a wall of badly formatted text.
If your goal is to get an answer to your questions, it's in your interest to make it as easy to read and understand as possible.
Please update your post.
---
### Author:  [@bruno-d](https://discuss.elastic.co/u/bruno-d)
#### Post date: [May 28, 2018, 9:39am UTC](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416/5 "2018-05-28T09:39:37Z")
Format errata
---
### Author:  [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [May 28, 2018, 9:59am UTC](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416/6 "2018-05-28T09:59:45Z")
Did you check the preview window?
---
### Author:  [@bruno-d](https://discuss.elastic.co/u/bruno-d)
#### Post date: [May 30, 2018, 1:14am UTC](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416/7 "2018-05-30T01:14:54Z")
Hi, new try.
I try to format it as possible to show the geoip struct and location which should be the issue.
**Just to relight the situation : Logstash index does not allow to be mapped as there's no geo\_point field. GeoIP information are perfectly filled per the pipeline filter from the VarX vaiable which is the IP detected. It works fine except the map.**
here is the **GET /logstash-2018.05/\_mapping**
```
"logstash-2018.05":
{ "mappings": {
"syslog": { "properties":
{ "@timestamp": { "type": "date" }, "@version": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "CPU": { "type": "long" }, "Disk": { "type": "long" }, "Port": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "RAM": { "type": "long" }, "Temp": { "type": "long" },
"Varx": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } },
"geoip": { "properties": {
"city_name": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } },
"continent_name": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } },
"country_iso_code": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } },
"location": { "properties": { "lat": { "type": "float" }, "lon": { "type": "float" } } },
"region_name": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } } }
},
"host": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "message": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "received_at": { "type": "date" }, "received_from": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "syslog_facility": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "syslog_facility_code": { "type": "long" }, "syslog_hostname": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "syslog_message": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "syslog_pid": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "syslog_program": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "syslog_severity": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "syslog_severity_code": { "type": "long" }, "syslog_timestamp": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "tags": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } }, "type": { "type": "text", "fields": { "keyword": { "type": "keyword", "ignore_above": 256 } } } } } } } }` />
```
I try to
```
`PUT _template/logstash
{
"template": "logstash-*",
"settings": {
"number_of_replicas": 1,
"number_of_shards": 1
},
"mappings": {
"syslog": {
"dynamic": "true",
"properties": {
"geoip": {
"dynamic": true,
"properties": {
"location": {
"type": "geo_point"
}
}
}
}
}
}`
```
Then delete the index and recreate it.
---
### Author:  [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [May 30, 2018, 5:08am UTC](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416/8 "2018-05-30T05:08:25Z")
Look
This is not formatted code
```
This is formatted code
```
Can you do this please? If not please explain what you don't understand.
---
### Author:  [@bruno-d](https://discuss.elastic.co/u/bruno-d)
#### Post date: [May 30, 2018, 10:13pm UTC](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416/9 "2018-05-30T22:13:48Z")
Oh yes got it now Sorry ! I corrected upper in the thread and removed the unformated messages. Thanks. Don't know how insert colors in the formatted like you did in red.
---
### Author:  [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [June 1, 2018, 6:56pm UTC](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416/10 "2018-06-01T18:56:47Z")
I had to parse your post to make it readable.
```auto
{
"mappings":{
"syslog":{
"properties":{
"@timestamp":{
"type":"date"
},
"@version":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
},
"CPU":{
"type":"long"
},
"Disk":{
"type":"long"
},
"Port":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
},
"RAM":{
"type":"long"
},
"Temp":{
"type":"long"
},
"Varx":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
},
"geoip":{
"properties":{
"city_name":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
},
"continent_name":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
},
"country_iso_code":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
},
"location":{
"properties":{
"lat":{
"type":"float"
},
"lon":{
"type":"float"
}
}
},
"region_name":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
}
}
},
"host":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
},
"message":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
},
"received_at":{
"type":"date"
},
"received_from":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
},
"syslog_facility":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
},
"syslog_facility_code":{
"type":"long"
},
"syslog_hostname":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
},
"syslog_message":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
},
"syslog_pid":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
},
"syslog_program":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
},
"syslog_severity":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
},
"syslog_severity_code":{
"type":"long"
},
"syslog_timestamp":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
},
"tags":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
},
"type":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":256
}
}
}
}
}
}
}
```
And:
```auto
PUT _template/logstash
{
"template":"logstash-*",
"settings":{
"number_of_replicas":1,
"number_of_shards":1
},
"mappings":{
"syslog":{
"dynamic":"true",
"properties":{
"geoip":{
"dynamic":true,
"properties":{
"location":{
"type":"geo_point"
}
}
}
}
}
}
}
```
Just wondering why did you set `"dynamic": true,` in `geoip` field?
---
### Author:  [@bruno-d](https://discuss.elastic.co/u/bruno-d)
#### Post date: [June 2, 2018, 4:26am UTC](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416/11 "2018-06-02T04:26:28Z")
> [@dadoonet](#):
>
> properties":{ "geoip":{ "dynamic":true
Hi, thanks how come it's nice with colors ? i will practice.
I put the **dynamic** to **true** because i found it in many thread on the subject. I have a poor level on Elastisearch but i am having fun. I have not been able to solve.
---
### Author:  [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [June 2, 2018, 7:56am UTC](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416/12 "2018-06-02T07:56:39Z")
> [@bruno-d](#):
>
> how come it's nice with colors ?
Pasting correct JSON (was missing curly braces or too many ones in your post), nice indentation... That's the key of the success.
> I have not been able to solve.
Could you provide a full recreation script as described in [About the Elasticsearch category](https://discuss.elastic.co/t/about-the-elasticsearch-category/21). It will help to better understand what you are doing. Please, try to keep the example as simple as possible.
A full reproduction script will help readers to understand, reproduce and if needed fix your problem.
---
### Author:  [@bruno-d](https://discuss.elastic.co/u/bruno-d)
#### Post date: [June 2, 2018, 12:37pm UTC](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416/13 "2018-06-02T12:37:50Z")
hi,
1. When I try to create a map of my _logstash index_ I got the error :
_No Compatible Fields: The "logstash-\*" index pattern does not contain any of the following field types: geo\_point._
2. I read many treads and found that geo\_point is a [lat,long] struct with lat-long declared as numbers but it's not strictly declared as GeoPoint.
3. The GeoIP pipeline filter is running fine, filling all the field of the mentionned GeoIP structure ;
4. The thread describe the **logstash index struct** as well as a PUT procedure to try to register a GeoIP struct. cf. upper ref **PUT \_template/logstash**
**I am still unable to have a Map with lat,lon fields filled with correct value.** and the message decribes in Step 1.
Regards
---
### Author:  [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [June 2, 2018, 1:06pm UTC](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416/14 "2018-06-02T13:06:21Z")
Please share what you ran.
---
### Author:  [@bruno-d](https://discuss.elastic.co/u/bruno-d)
#### Post date: [June 3, 2018, 12:09am UTC](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416/15 "2018-06-03T00:09:47Z")
I ran it again to make sure of the process and it's working
1. Delete from the _GUI Managment/ Index Pattern_ : **Delete**** logstash-**\*
2. `PUT _template/logstash` according to the command line in the thread
3. Register VarX fied (may be not necessary as it is already in the datas)
4. I register the GeoIP pipeline filter to VarX variable (containing the IP address)
5. I reconstruct the index from the _GUI Managment / Index Pattern_ : **Create Logstash-** \* and it works 😄
I am so happy I have the MAP and GeoIP.location is of geo\_point type in the _Kibana/Managment/Index Pattern_ as in the screen capture.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 1, 2018, 12:09am UTC](https://discuss.elastic.co/t/geop-location-not-of-geo-pooint-elastic-co-5-6-4-on-rpi3/133416/16 "2018-07-01T00:09:57Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.