Can you try using Logstash to transform your data? Take a look at the mutate
plugin filter, specifically configured with add_field
: https://www.elastic.co/guide/en/logstash/current/plugins-filters-mutate.html#plugins-filters-mutate-add_field.
You'll want to end up with something like this:
filter {
mutate {
rename => {
'latitude' => '[geo][lat]'
'longitude' => '[geo][lon]'
}
}
}
or:
filter {
mutate {
rename => {
'latitude' => '[geo][0]'
'longitude' => '[geo][1]'
}
}
}
For some more context, what we're trying to do is wrangle some of your data to create a new field which conforms to the geo_point
datatype (https://www.elastic.co/guide/en/elasticsearch/reference/current/geo-point.html).
CJ