After creating this template, I issued a complete reload of all data (removed indices from ES and deleted registry file in filebeat - I dont have that much data).
The location field contains two properties, lat and lon, submitted as numbers:
geoip.location.lat: number
geoip.location.lon: number
Was the index created after you added the index template? The template only applies when the index is first created as you can not change mappings in existing indices.
That's what I was missing. I only deleted the Index in Elasticsearch. So, this template applies to the data when creating the Kibana Index, not the Elastic Search Index.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.