Hi, I am using the default logstash
geoip {
source => "client"
}
to ingest my geo ip, I have set the mapping which is here:
https://pastebin.com/wNJ5LT2g
as you can see location is set to geo_point
In my documents I see
"geoip" : {
"ip" : "108.171.131.166",
"longitude" : -97.822,
"country_name" : "United States",
"country_code3" : "US",
"latitude" : 37.751,
"continent_code" : "NA",
"location" : {
"lon" : -97.822,
"lat" : 37.751
},
but when I try to use the map, I add the layer it finds my location field as the geospatial field but I get zero hits
{ "took": 40, "timed_out": false, "_shards": { "total": 5, "successful": 5, "skipped": 0, "failed": 0 }, "hits": { "total": 0, "max_score": null, "hits": [] }, "status": 200 }
the only way i get hits from the query was to remove the bounding box which it obvioulsy needs to search the lat/long.
TIA
rr