I already have index in elasticsearh, i added new field in logstash to my index like the follow:
mutate {
add_field => {"[location]" => ["%{lat}","%{lon}"]}
}
mutate {
convert => {
"[location][lat]" => "float"
"[location][lon]" => "float"
}
I found the new field as i want but i couldn't map the location to be geo_point
Any suggestions ?
Thanks