Geopoint data type not getting updated

Elastic Stack Logstash
1

The issue is location is not being shown as geo_point data type so i am not able to use the data in the map section.

Hello there, I have a JSON in below format

      {
     "id": "******",
     "key": "******",
     "value": {
      "rev": "******"
     },
     "doc": {
      "_id": "******",
      "_rev": "******",
      "TxID": "******",
      "companyID": "******",
      "companyName": "xxx.",
      "date": "May 12,2020, 12:19:42 PM",
      "email": "xxx@gmail.com",
      "firstName": "Test",
      "ipAddress": "185.221.69.46",
      "lastName": "User5",
      "~version": "******"
     }
    }

Please note the field ipAddress, I then use geoip in logstash and it works

    geoip {
              source => "[doc][ipAddress]"
          }

The issue is location is not being shown as geo_point data type so i am not able to use the data in the map section.
The output in KIbana for the JSON
image

The issue is location is not being shown as geo_point data type so i am not able to use the data in the map section.

Screenshot from my JSON

image
image1182×373 18.5 KB

Please Note - Kibana Sample data works fine it even shows data type as geo_point

Screenshot from Kibana Sample Data below

image
image1004×504 31.7 KB

2

You need an index template that tells elasticsearch that that field is a geo_point.

3

I am sorry I do not follow, where do i specify exactly.
Filter in logstash config or directly in elasticsearch.

4

Personally I would do it in elasticsearch, but you could manage the template using the elasticsearch output if you wanted to.

5

Could you please guide me how to change it in Elasticsearch, i tried but couldn't.

6

I just deleted the index and it worked automatically :mask:

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.