How to modified configure logstash add geo_point and load data with logstash to elasticsearch

I have a column device.latlong where the longtitude and latitude values ​​become one column, how to add a geo_point file to the logstash configuration, and display it in the kibana visualization

and this my configure api.conf

input {
file {
path => "/home/mynameis/Documents/project/device.csv"
start_position => "beginning"
sincedb_path => "/dev/null"
}
}
filter {
csv {
separator => ","
skip_header => "true"
columns => ["response._passed","response.timestamp","response.verbose","response.verbose.gestureSetBin",
"response.verbose.gestureSetNames.Stage_0", "response.verbose.gestureSetNames.Stage_1",
"response.verbose.gestureSetResults.stage_0","response.verbose.gestureSetResults.stage_1",
"response.verbose.landmarkCoordinates","response.verbose.left_eye_ar_array","response.verbose.mouth_arr_array",
"response.verbose.right_eye_ar_array","device.apiLevel","device.name","device.brand","device.buildNumber","device.carrier",
"device.deviceCountry","device.deviceId","device.manufacturer","device.phoneNumber","device.serialNumber","device.uniqueId",
"device.osBuildId","device.userAgent","device.macAddress._55","device.model","device.systemName","device.systemVersion",
"device.totalDiskCapacity","device.totalMemory","device.version","device.hasNotch","device.deviceType","device.timezone",
"device.locale","device.readableVersion","device.lastUpdateTime","device.freeDiskStorage","device.fontScale",
"device.latlong","device.imei","device.ipaddress","device.macaddress"]
}
mutate{
convert => {"device.latlong" => "float"}
add_field => ["location", "%{device.latlong}"]
}
}
output {
elasticsearch {
hosts => "http://localhost:9200"
index => "api_response_and_device_information"
}
stdout {}

You need a template to tell elasticsearch that a fields is a geo_point. The default template includes an example of how to do so.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.