LOCATION as template with an array of two values

Elastic Stack Logstash
1

Hi! I have config file with this in filter:
mutate {
add_field => {
"[location]" => "%{latitude},%{longitude}"
}
remove_field => ["latitude", "longitude"]
}
But, in 5 version in logstash, location was array, and I can visualize it like geo point. In 6 version in logstash it is like row type, and I can't visualize it.

Give me advice about: How I may to do "[location]" field template with an array of two values

2

You can do

mutate {
  add_field => {
    "location" => "%{latitude}"
  }
}
mutate {
  add_field => {
    "location" => "%{longitude}"
  }
}

to make location an array of these items.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.