# Is there any way to find the "xxx" that produces the most geo data？
**URL:** https://discuss.elastic.co/t/is-there-any-way-to-find-the-xxx-that-produces-the-most-geo-data/243142
**Category:** Kibana
**Created:** [July 30, 2020, 1:23am UTC](https://discuss.elastic.co/t/is-there-any-way-to-find-the-xxx-that-produces-the-most-geo-data/243142 "2020-07-30T01:23:06Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@wajika](https://discuss.elastic.co/u/wajika)
#### Post date: [July 30, 2020, 1:23am UTC](https://discuss.elastic.co/t/is-there-any-way-to-find-the-xxx-that-produces-the-most-geo-data/243142/1 "2020-07-30T01:23:07Z")
I did not find the visitor information for this location in Zhengzhou in the city list.
I want to find out the "XX" serivce traffic information corresponding to geo\_localtion.
> serive.name geo\_localtion
> xxxx 113.11111,22.1111
The data source is kubernetes ingress.
mapping
[https://paste.ubuntu.com/p/qWqGNrggbf/](https://paste.ubuntu.com/p/qWqGNrggbf/)
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [July 30, 2020, 1:38am UTC](https://discuss.elastic.co/t/is-there-any-way-to-find-the-xxx-that-produces-the-most-geo-data/243142/2 "2020-07-30T01:38:18Z")
That's definitely possible, have you tried an aggregation on the `geoip.location` field?
---
### Author:  [@wajika](https://discuss.elastic.co/u/wajika)
#### Post date: [July 30, 2020, 6:11am UTC](https://discuss.elastic.co/t/is-there-any-way-to-find-the-xxx-that-produces-the-most-geo-data/243142/3 "2020-07-30T06:11:59Z")
The geoip.location field cannot be used as an aggregation condition.
I tried several methods, but the amount of data displayed is very different from the amount on the map.
---
### Author:  [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)
#### Post date: [July 30, 2020, 3:01pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-find-the-xxx-that-produces-the-most-geo-data/243142/4 "2020-07-30T15:01:46Z")
@wajika
Thanks for posting your question. Can you describe your use case more? What are you looking for in the table on the right of the map? Could this problem be better solved with drilldowns, allowing you to link into a dashboard with the context of a specific IP address? Are you just looking for the latest documents for this IP address? Would showing raw documents help?
---
### Author:  [@wajika](https://discuss.elastic.co/u/wajika)
#### Post date: [July 31, 2020, 1:48am UTC](https://discuss.elastic.co/t/is-there-any-way-to-find-the-xxx-that-produces-the-most-geo-data/243142/5 "2020-07-31T01:48:13Z")
@Nathan_Reese
Sorry, I did not express it clearly.
The problem I encountered was that I found that my visitor information (geo) was incorrectly displayed on the map, and the largest mark on the map did not match the actual location of my customer. I want to find out the reason, but the geo\_localtion field cannot be queried as an aggregation condition.
I want to know if the elastic team has a better way to pinpoint this anomaly.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 28, 2020, 1:48am UTC](https://discuss.elastic.co/t/is-there-any-way-to-find-the-xxx-that-produces-the-most-geo-data/243142/6 "2020-08-28T01:48:19Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.