# Layer dot found result

**URL:** https://discuss.elastic.co/t/layer-dot-found-result/312028
**Category:** Kibana
**Tags:** maps, runtime-fields
**Created:** [August 12, 2022, 5:01pm UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028 "2022-08-12T17:01:46Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![5k\_pwc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/5k_pwc/32/107057_2.png) [@5k\_pwc](https://discuss.elastic.co/u/5k_pwc)
#### Post date: [August 12, 2022, 5:01pm UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/1 "2022-08-12T17:01:46Z")

</div>

Hello everyone,  
I am having trouble viewing points in my kibana map, It says No results found , I have made sure the data is in geo.point format, so I have no clue what the problem could be. below is an image of the problem and the data in discover.

```auto
{
  "docvalue_fields": [],
  "size": 10000,
  "track_total_hits": 10001,
  "_source": false,
  "fields": [
    "location"
  ],
  "script_fields": {},
  "stored_fields": [
    "location"
  ],
  "runtime_mappings": {},
  "query": {
    "bool": {
      "must": [],
      "filter": [
        {
          "bool": {
            "must": [
              {
                "exists": {
                  "field": "location"
                }
              },
              {
                "geo_bounding_box": {
                  "location": {
                    "top_left": [
                      8.4375,
                      37.71859
                    ],
                    "bottom_right": [
                      11.953129999999987,
                      36.03133
                    ]
                  }
                }
              }
            ]
          }
        }
      ],
      "should": [],
      "must_not": []
    }
  }
}

```

 ![Capture d’écran 2022-08-12 175902](https://us1.discourse-cdn.com/elastic/original/3X/0/f/0f7ca2f9b873ffdf24cb34e4ca5a594fa739fd12.png)

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [August 12, 2022, 5:27pm UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/2 "2022-08-12T17:27:55Z")

</div>

What version? How installed?  
I ask as there is / was a bug depending on these answer.

Further down that settings screen try the 2nd clustering setting

---

<div class="post-metadata">

### Author: ![5k\_pwc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/5k_pwc/32/107057_2.png) [@5k\_pwc](https://discuss.elastic.co/u/5k_pwc)
#### Post date: [August 12, 2022, 6:23pm UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/3 "2022-08-12T18:23:07Z")

</div>

I used version 8.0  
and the 2nd clustering setting you talk about Tooltip fields?

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [August 12, 2022, 8:47pm UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/4 "2022-08-12T20:47:59Z")

</div>

You did not answer your installation method and I was referring to the Scaling method select something other than "Use vector tiles"

---

<div class="post-metadata">

### Author: ![5k\_pwc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/5k_pwc/32/107057_2.png) [@5k\_pwc](https://discuss.elastic.co/u/5k_pwc)
#### Post date: [August 12, 2022, 9:12pm UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/5 "2022-08-12T21:12:52Z")

</div>

I performed the installation of the whole stack on windows

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [August 12, 2022, 9:24pm UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/6 "2022-08-12T21:24:51Z")

</div>

Did you try the different scaling method?

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [August 12, 2022, 9:25pm UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/7 "2022-08-12T21:25:53Z")

</div>

Limit results to 10,000

Or

Show clusters when results exceed 10,000

Perhaps take a look at

> [@Kibana Maps features not displaying (failed net::ERR\_CONTENT\_DECODING\_FAILED)](https://discuss.elastic.co/t/kibana-maps-features-not-displaying-failed-net-err-content-decoding-failed/302424/7):
>
> @quentin.renoux We think we have a work around / temp fix. Can you try setting this in elasticsearch.yml http.compression: true NOTE : There could be some security concerns with that setting Follow Here : [[Maps] Vector tiles from Elasticsearch are not loading in on-prem instances · Issue #130291 · elastic/kibana · GitHub](https://github.com/elastic/kibana/issues/130291)

---

<div class="post-metadata">

### Author: ![5k\_pwc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/5k_pwc/32/107057_2.png) [@5k\_pwc](https://discuss.elastic.co/u/5k_pwc)
#### Post date: [August 12, 2022, 9:45pm UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/8 "2022-08-12T21:45:23Z")

</div>

i have changed the scaling method but no visualization the same issue

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [August 12, 2022, 10:35pm UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/9 "2022-08-12T22:35:10Z")

</div>

Then then pretty much need to back up to the beginning

Show us the mapping (schema)  
Show us a couple sample documents.  
Also how you added the layer.

Also, you could just simply add the sample data either the weblog and you can check that. See if it also displays.

8.0.1 `kibana_sample_data_logs` added as a document ... layer shows fine... so it is most likely in your mapping (schema) / and or data...

 ![Screen Shot 2022-08-12 at 6.51.39 PM](https://us1.discourse-cdn.com/elastic/original/3X/4/0/404eb04f1b3248f08e2eb3c4323f71ec7a234cdf.jpeg)

---

<div class="post-metadata">

### Author: ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)
#### Post date: [August 13, 2022, 1:39pm UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/10 "2022-08-13T13:39:34Z")

</div>

@ [5k\_pwc](https://discuss.elastic.co/u/5k_pwc)

It looks like the problem is with your layer "visibility" settings. In the screen shot provided in your post, the map is at zoom level 2.34 but your layer "visibility" is set to only show the layer between zoom ranges 10 and 24. Change layer visibility to be between 0 and 24 to show data at all zoom levels.

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [August 13, 2022, 3:31pm UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/11 "2022-08-13T15:31:48Z")

</div>

Wow @Nathan_Reese You have eagle eyes.. I looked right that and did not see it!

---

<div class="post-metadata">

### Author: ![5k\_pwc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/5k_pwc/32/107057_2.png) [@5k\_pwc](https://discuss.elastic.co/u/5k_pwc)
#### Post date: [August 13, 2022, 10:11pm UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/12 "2022-08-13T22:11:20Z")

</div>

I tried to change layer visibility to be between 0 and 24 ,any modification the same probleme,

![km (2)](https://us1.discourse-cdn.com/elastic/original/3X/f/4/f4ab723dbdde948e1f9776295102b4c10db22eaf.png)

 ![KL](https://us1.discourse-cdn.com/elastic/original/3X/4/2/422478e578ff1d5908cd933d8c1a6edd4604ee31.png)

a preview of the geometric fields in postgres  
 ![dfgj](https://us1.discourse-cdn.com/elastic/original/3X/6/3/63b23184c0c2f8d0b192c4c29532e438b188a001.png)

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [August 13, 2022, 10:26pm UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/13 "2022-08-13T22:26:14Z")

</div>

Hi @5k_pwc the Postgres field does not help us.. that is not how the data is stored in elasticsearch.

So I think we are back to these questions

How did you load the data?  
Show us the mapping (schema) which looks right you have a geopoint.  
Show us a couple sample documents from Elasticsearch

`GET /es-*/_search`

---

<div class="post-metadata">

### Author: ![5k\_pwc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/5k_pwc/32/107057_2.png) [@5k\_pwc](https://discuss.elastic.co/u/5k_pwc)
#### Post date: [August 13, 2022, 11:00pm UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/14 "2022-08-13T23:00:12Z")

</div>

at the beginning I created my empty index then I loaded the data with logstash 8.0  
then the mapping like this  
 ![Capture d’écran 2022-08-13 234033](https://us1.discourse-cdn.com/elastic/original/3X/a/a/aaaf0e5f29b08b25e6575f7317cd93cac5788ced.png)  
in my file log i named the filed geo with location but in mapping i can't see him only in dataview i can like this

 ![Capture d’écran 2022-08-13 234624](https://us1.discourse-cdn.com/elastic/original/3X/7/b/7b59e6453ecef3f2e12ea3e6749ec03827121bd2.png)  
and coordinates like this  
 ![cor](https://us1.discourse-cdn.com/elastic/original/3X/d/4/d4277920c347026279a39b9bc936ae4cb1ab52d8.png)  
my file.log contains

```auto
mutate {
    rename => { "LAT" => "[location][lat]" }
    rename => { "LON" => "[location][lon]" }
}

```

---

<div class="post-metadata">

### Author: ![5k\_pwc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/5k_pwc/32/107057_2.png) [@5k\_pwc](https://discuss.elastic.co/u/5k_pwc)
#### Post date: [August 13, 2022, 11:01pm UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/15 "2022-08-13T23:01:12Z")

</div>

hope i was able to answer your questions?

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [August 13, 2022, 11:56pm UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/16 "2022-08-13T23:56:05Z")

</div>

Thanks but, that still does not show us what data **actually** stored in elasticsearch and can not tell by that screenshot (BTW screenshot of text is highly discouraged as it can not be searched , debugged etc..etc.)

The map will only work on the `geo_point` (or other `geo_*` types) the `coordinates` field are not read by the map.

AND OH is there a timefield associated with this data? It looks like you do not have a time field but just asking..

Go to Kibana -\> Dev Tools run this? Do you see any results? Do you see any results with the location field populated?

This is important to see what your location data looks like!

> [@stephenb](#):
>
> GET /es-\*/\_search

And actually you should be able to go to Kibana -\> Dev Tools and run the query you saw in inspect on the Map Page... and see what it returns.. example below ...

Just copy the query in right below the `GET /es-*/_search` line this is from your examples...

```auto
GET /es-*/_search
{
  "docvalue_fields": [],
  "size": 10000,
  "track_total_hits": 10001,
  "_source": false,
  "fields": [
    "location"
  ],
  "script_fields": {},
  "stored_fields": [
    "location"
  ],
  "runtime_mappings": {},
  "query": {
    "bool": {
      "must": [],
      "filter": [
        {
          "bool": {
            "must": [
              {
                "exists": {
                  "field": "location"
                }
              },
              {
                "geo_bounding_box": {
                  "location": {
                    "top_left": [
                      8.4375,
                      37.71859
                    ],
                    "bottom_right": [
                      11.953129999999987,
                      36.03133
                    ]
                  }
                }
              }
            ]
          }
        }
      ],
      "should": [],
      "must_not": []
    }
  }
}

```

---

<div class="post-metadata">

### Author: ![5k\_pwc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/5k_pwc/32/107057_2.png) [@5k\_pwc](https://discuss.elastic.co/u/5k_pwc)
#### Post date: [August 14, 2022, 12:09am UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/17 "2022-08-14T00:09:48Z")

</div>

> [@stephenb](#):
>
> GET /jeudi/\_search  
> this my mapping

```auto
{
  "took" : 1,
  "timed_out" : false,
  "_shards" : {
    "total" : 1,
    "successful" : 1,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 719,
      "relation" : "eq"
    },
    "max_score" : 1.0,
    "hits" : [
      {
        "_index" : "jeudi",
        "_id" : "2046",
        "_score" : 1.0,
        "_source" : {
          "ygps" : 0,
          "adressenum" : "67747",
          "@timestamp" : "2022-08-13T21:36:02.557252300Z",
          "numext" : null,
          "id" : "2046",
          "nom" : null,
          "detail" : "CASSECONDPROV_AVGRILLAGEAVERT",
          "datecons" : "2015/12/01 00:00:00.000",
          "commune" : "1117",
          "doccons" : null,
          "secteur_e" : "30515033",
          "commcons" : null,
          "zgps" : null,
          "volume_per" : 0,
          "secteur_ad" : "117151",
          "gouvern" : "11",
          "agent" : null,
          "nombre_ab" : null,
          "directio_1" : "60100000",
          "arrond_ar" : "111712",
          "adresse" : null,
          "etat" : "REPAREE",
          "detectio" : "APPEL",
          "arrond" : "111712",
          "n_invent" : null,
          "cause" : "INTERVHUM",
          "typedefa" : "PERCE",
          "commune_ar" : "1117",
          "type" : "Point",
          "adressecod" : "1117",
          "docrepa" : null,
          "xgps" : 0,
          "coordinates" : [
            1144140.75,
            4428199.28
          ],
          "techrepa" : "REPARE",
          "cadran" : null,
          "division" : null,
          "priorite" : "IMMEDIAT",
}}}

```

the problem is that the coordinates field I did not create but rather location that I create them with geopoint format but is empty does not contain data

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [August 14, 2022, 12:18am UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/18 "2022-08-14T00:18:08Z")

</div>

Hi @5k_pwc Yup BTW that is not the mapping that is an actual document .. 🙂

to get the mapping / schema just run  
`GET /jeudi` without the `_search`

but that is perfect and as you state... you have no actual location field / data .. there lies the problem! ☹

So yes you have a mapping for location (schema / field) ... but you are not actually filling in the location data into the `location` field you have an error in your logstash configuration it is is not properly loading the `location` field.

Sooooo you will need to provide your **entire** logstash conf and a couple samples of data if you want help, all in text.. anonymize what you need to.

tl;dr you got a bug in your logstash pipeline configuration.

A simple way to debug logstash is put the stdout debugger at the end in the output section

```auto
output {
....
  stdout { codec => rubydebug }

}

```

---

<div class="post-metadata">

### Author: ![5k\_pwc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/5k_pwc/32/107057_2.png) [@5k\_pwc](https://discuss.elastic.co/u/5k_pwc)
#### Post date: [August 14, 2022, 5:31am UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/19 "2022-08-14T05:31:19Z")

</div>

ok this is my logstash conf

```auto
input {
    jdbc {
jdbc_driver_library => "C:\Users\Lenovo\Desktop\ELK\logstash-8.1.0\logstash-core\lib\jars\postgresql-42.4.0.jar"
jdbc_driver_class => "org.postgresql.Driver"
jdbc_connection_string => "jdbc:postgresql://localhost/ ****"
        jdbc_user => " ****"
        jdbc_password => " *****"
        statement => 'SELECT id, st_asgeojson(geom) as geom, nom, typeano, etat, adresse, createur FROM "TABLENAME"'
  
    }
}

filter {
  mutate { rename => { "data" => "additionalData" }
}
  
  #parse geom field as json,
  #geom => {"type":"Point","crs":{"type":"name","properties":{"name":"EPSG:3857"}},"coordinates":[10,11]}
  json { source => "geom" }
  
  #remove unwanted fields
  mutate { remove_field => ["crs", "path", "@version", "host", "message", "geom"] }
  
  #prepare geo_point field
 # mutate { rename => {"coordinates" => "[location][coordinates]"}}
    #mutate { rename => {"type" => "[location][type]"}}
mutate {
    rename => { "LAT" => "[location][lat]" }
    rename => { "LON" => "[location][lon]" }
}
# mutate { replace => {"location" => "POINT(%{lon} %{lat})" }
}

output {
stdout {  
        codec => json_lines  
    } 
elasticsearch {
hosts => ["http://localhost:9200"]
index => "jeudi"
user => " **********"
password => " ********"
document_id =>"%{id}"
}
}

```

knowing that the geom field is the geometric field, and the other characters

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [August 14, 2022, 5:53am UTC](https://discuss.elastic.co/t/layer-dot-found-result/312028/20 "2022-08-14T05:53:32Z")

</div>

I see you have been trying to debug 🙂

To help I need to see the raw input and output.

Please comment out / remove everything in the `filter` section and just read the input and show me the output

Sometime codec `json_lines` can cause some issues I don't recommend it.

Can you use please use this and just read 1 or 2 inputs and provide the output.

```auto
  stdout { codec => rubydebug }

```

example

```auto
input {
    jdbc {
      jdbc_driver_library => "C:\Users\Lenovo\Desktop\ELK\logstash-8.1.0\logstash-core\lib\jars\postgresql-42.4.0.jar"
      jdbc_driver_class => "org.postgresql.Driver"
      jdbc_connection_string => "jdbc:postgresql://localhost/ ****"
      jdbc_user => " ****"
      jdbc_password => " *****"
      statement => 'SELECT id, st_asgeojson(geom) as geom, nom, typeano, etat, adresse, createur FROM "TABLENAME"'
    }
}

output {
  stdout { codec => rubydebug }
}

```

[Next page](https://discuss.elastic.co/t/layer-dot-found-result/312028.md?page=2)
