# KIbana geo-ip visualization using existing Lat Lon

**URL:** https://discuss.elastic.co/t/kibana-geo-ip-visualization-using-existing-lat-lon/102162
**Category:** Kibana
**Created:** [September 28, 2017, 6:10pm UTC](https://discuss.elastic.co/t/kibana-geo-ip-visualization-using-existing-lat-lon/102162 "2017-09-28T18:10:47Z")
**Posts on this page:** 12
**Page:** 1

<div class="post-metadata">

### Author: ![imortalsolitude](https://avatars.discourse-cdn.com/v4/letter/i/6f9a4e/32.png) [@imortalsolitude](https://discuss.elastic.co/u/imortalsolitude)
#### Post date: [September 28, 2017, 6:10pm UTC](https://discuss.elastic.co/t/kibana-geo-ip-visualization-using-existing-lat-lon/102162/1 "2017-09-28T18:10:48Z")

</div>

Is ELK or Kibana 5.6 capable to plot and visualize geo location if zip code with latitude and longitudes are provided if yes then till what dept will it is be any close to google map offering ?

---

<div class="post-metadata">

### Author: ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)
#### Post date: [September 28, 2017, 8:04pm UTC](https://discuss.elastic.co/t/kibana-geo-ip-visualization-using-existing-lat-lon/102162/2 "2017-09-28T20:04:24Z")

</div>

if your ES mapping has a geo\_point, you can use "Coordinate Map" visualization  
ANd if you have a zipcode field in your documents, you could use a terms-aggregation and show it on the Region Map. This requires you to have a `geojson` file with `zipcodes` though

Reference: [https://github.com/elastic/content/issues/1861#issuecomment-322614748](https://github.com/elastic/content/issues/1861#issuecomment-322614748)

And as far as zoom levels are concerned, while the normal zoom levels are provided also for users without X-Pack installed, the high-resolution tiles are part of the commercial X-Pack offering. Starting even from the free X-Pack basic tier zoom levels are increased from 10 to 18, which would be definitely closer to google map offering I think.

Thanks  
Rashmi

---

<div class="post-metadata">

### Author: ![imortalsolitude](https://avatars.discourse-cdn.com/v4/letter/i/6f9a4e/32.png) [@imortalsolitude](https://discuss.elastic.co/u/imortalsolitude)
#### Post date: [September 29, 2017, 5:42pm UTC](https://discuss.elastic.co/t/kibana-geo-ip-visualization-using-existing-lat-lon/102162/3 "2017-09-29T17:42:10Z")

</div>

Thanks for the pointer Rashmi, the reference link seems to be broken.

---

<div class="post-metadata">

### Author: ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)
#### Post date: [September 29, 2017, 6:13pm UTC](https://discuss.elastic.co/t/kibana-geo-ip-visualization-using-existing-lat-lon/102162/4 "2017-09-29T18:13:16Z")

</div>

No, it does work for me 🙂  
[https://github.com/elastic/content/issues/1861#issuecomment-322614748](https://github.com/elastic/content/issues/1861#issuecomment-322614748)

---

<div class="post-metadata">

### Author: ![imortalsolitude](https://avatars.discourse-cdn.com/v4/letter/i/6f9a4e/32.png) [@imortalsolitude](https://discuss.elastic.co/u/imortalsolitude)
#### Post date: [October 17, 2017, 6:09pm UTC](https://discuss.elastic.co/t/kibana-geo-ip-visualization-using-existing-lat-lon/102162/5 "2017-10-17T18:09:24Z")

</div>

Hi Rashmi

I am still having issue passing geo\_point mapping the lat,lon since upgrading the 5.6 (this was working in 5.3) is there a known issue with 5.6 geohash? I have the default twitter plugin installed but it seems my config is not using the template i am specifying in the conf file . How do i determine if my logstash is indeed using the template specified in the config my geoip config is very similar to the one discussed [here](https://discuss.elastic.co/t/getting-geo-point-from-twitter/33529) but it still does not work. If i default it to use logstash template i no longer get the geo\_point error would appreciate any pointers to fix the geo\_point issue.

---

<div class="post-metadata">

### Author: ![thomasneirynck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thomasneirynck/32/23313_2.png) [@thomasneirynck](https://discuss.elastic.co/u/thomasneirynck)
#### Post date: [October 18, 2017, 9:18am UTC](https://discuss.elastic.co/t/kibana-geo-ip-visualization-using-existing-lat-lon/102162/6 "2017-10-18T09:18:21Z")

</div>

hi @imortalsolitude,

could you share the mappings of your index? It'd be interesting to see if you have a geo\_point field there.

thanks,

---

<div class="post-metadata">

### Author: ![imortalsolitude](https://avatars.discourse-cdn.com/v4/letter/i/6f9a4e/32.png) [@imortalsolitude](https://discuss.elastic.co/u/imortalsolitude)
#### Post date: [October 18, 2017, 2:29pm UTC](https://discuss.elastic.co/t/kibana-geo-ip-visualization-using-existing-lat-lon/102162/7 "2017-10-18T14:29:38Z")

</div>

I dont see geo\_point being passed anywhere in the index mapping i believe it is not even using the custom template i am pointing it to i can see the latitude and longitude being shown with the city and state.  
"twitter-cvs": {  
"mappings": {  
"tweet": {  
"properties": {  
"@timestamp": {  
"type": "date"  
},  
"@version": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
},  
"coordinates": {  
"properties": {  
"coordinates": {  
"type": "float"  
},  
"type": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
}  
}  
},  
"created\_at": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}  
},  
"display\_text\_range": {  
"type": "long"  
"geo": {  
"properties": {  
"coordinates": {  
"type": "float"  
},  
"type": {  
"type": "text",  
"fields": {  
"keyword": {  
"type": "keyword",  
"ignore\_above": 256  
}  
}

 ![tweet](https://us1.discourse-cdn.com/elastic/original/3X/e/c/ec406440248ef0c9b6f1dd4b5e6dbef813e6f49d.JPG)

---

<div class="post-metadata">

### Author: ![imortalsolitude](https://avatars.discourse-cdn.com/v4/letter/i/6f9a4e/32.png) [@imortalsolitude](https://discuss.elastic.co/u/imortalsolitude)
#### Post date: [October 23, 2017, 2:07pm UTC](https://discuss.elastic.co/t/kibana-geo-ip-visualization-using-existing-lat-lon/102162/8 "2017-10-23T14:07:29Z")

</div>

I was wondering if this has something to do with the twitter plugin that i had installed, if i remove the plugin geo-ip filed is no longer populated in the index mapping adding it back brings the geo-ip field back in the index.

---

<div class="post-metadata">

### Author: ![thomasneirynck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thomasneirynck/32/23313_2.png) [@thomasneirynck](https://discuss.elastic.co/u/thomasneirynck)
#### Post date: [October 23, 2017, 10:46pm UTC](https://discuss.elastic.co/t/kibana-geo-ip-visualization-using-existing-lat-lon/102162/9 "2017-10-23T22:46:56Z")

</div>

Yeah, you need the geo\_point field as a prerequisite for any kind of mapping.

I'm not familiar with the twitter-plugin. Is that something from logstash or Elasticsearch maybe?

---

<div class="post-metadata">

### Author: ![imortalsolitude](https://avatars.discourse-cdn.com/v4/letter/i/6f9a4e/32.png) [@imortalsolitude](https://discuss.elastic.co/u/imortalsolitude)
#### Post date: [October 23, 2017, 10:54pm UTC](https://discuss.elastic.co/t/kibana-geo-ip-visualization-using-existing-lat-lon/102162/10 "2017-10-23T22:54:30Z")

</div>

twitter-plugin is logstash extension but even without the plugin my indexes are not populating with geo-ip information is there anything wrong with the template or the conf file? i dont even see my template being used. if i default to /\_template repository then a few things work.

---

<div class="post-metadata">

### Author: ![imortalsolitude](https://avatars.discourse-cdn.com/v4/letter/i/6f9a4e/32.png) [@imortalsolitude](https://discuss.elastic.co/u/imortalsolitude)
#### Post date: [November 10, 2017, 10:39pm UTC](https://discuss.elastic.co/t/kibana-geo-ip-visualization-using-existing-lat-lon/102162/11 "2017-11-10T22:39:20Z")

</div>

The issue seems to be with the template and its linkage to the index. If i use the default logstash index then the geo\_point works however if any specific index is to be created other than the default logstash template the geo\_point issue re-occurs.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 8, 2017, 10:39pm UTC](https://discuss.elastic.co/t/kibana-geo-ip-visualization-using-existing-lat-lon/102162/12 "2017-12-08T22:39:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
