Hello, I have parsed the an auth.log via grok and elasticsearch is looking up the IP geo location but the system.auth.ssh.geoip.city_name field is set as string and not geopoint. Is it possible to change it's type somehow? Regards, Peter

Kibana change field type to geopoint

warkolm (Mark Walkom) August 7, 2017, 10:53pm 2

This is better answered in your other thread - Geo_point is not getting mapped correctly

Topic		Replies	Views
Geopoint type Elasticsearch	2	342	July 26, 2019
Geo_location Kibana	3	511	September 7, 2017
Kibana how to get geo_point working? Kibana	4	1531	July 6, 2017
Mapping Issues With GeoIP Logstash	6	534	February 27, 2018
Index pattern does not contain any of the following field types: geo_point Kibana	4	20358	June 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Kibana change field type to geopoint

Related topics