Index Not Available in Kibana Maps

Elastic Stack Kibana
1

I am attempting to create a Map in Kibana, but my index is not available as an option. I have found several posts around this, but the common issue in those cases was that no geo_point field is specified in the Index Template, but that is not the case in my situation.

For this particular data source, we are utilizing host.geo, source.geo, and destination.geo. There are actually even more than that defined, but we are only utilizing those three. Each of them are the exact same geo template as follows:

      "geo" : {
        "properties" : {
          "city_name" : {
            "ignore_above" : 1024,
            "type" : "keyword"
          },
          "continent_code" : {
            "ignore_above" : 1024,
            "type" : "keyword"
          },
          "continent_name" : {
            "ignore_above" : 1024,
            "type" : "keyword"
          },
          "country_code2" : {
            "ignore_above" : 1024,
            "type" : "keyword"
          },
          "country_code3" : {
            "ignore_above" : 1024,
            "type" : "keyword"
          },
          "country_iso_code" : {
            "ignore_above" : 1024,
            "type" : "keyword"
          },
          "country_name" : {
            "ignore_above" : 1024,
            "type" : "keyword"
          },
          "dma_code" : {
            "ignore_above" : 1024,
            "type" : "keyword"
          },
          "location" : {
            "type" : "geo_point"
          },
          "name" : {
            "ignore_above" : 1024,
            "type" : "keyword"
          },
          "postal_code" : {
            "ignore_above" : 1024,
            "type" : "keyword"
          },
          "region_code" : {
            "ignore_above" : 1024,
            "type" : "keyword"
          },
          "region_iso_code" : {
            "ignore_above" : 1024,
            "type" : "keyword"
          },
          "region_name" : {
            "ignore_above" : 1024,
            "type" : "keyword"
          },
          "timezone" : {
            "ignore_above" : 1024,
            "type" : "keyword"
          }
        }
      }

Essentially, all three host.geo.location, source.geo.location, and destination.geo.location are all defined as geo_point, but my index is still not available to be selected in Maps.

EDIT: I can also confirm the Index Pattern is recognizing the fields as geo_point:

2021-04-22_10-49-56

We are currently running 7.12.0 throughout the stack.

Any assistance with troubleshooting would be much appreciated!

3

Whelp... disregard this entire post! LOL

I created this index template more than a month ago, and I started indexing data to it about three weeks ago, but the index was not an available option in Maps until [of course] after I made this post. I refreshed the page, and I can select the index now.

Strange...

1 Like
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.