# Location based dashboard
**URL:** https://discuss.elastic.co/t/location-based-dashboard/257559
**Category:** Kibana
**Created:** [December 3, 2020, 5:41pm UTC](https://discuss.elastic.co/t/location-based-dashboard/257559 "2020-12-03T17:41:13Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@vibhz](https://discuss.elastic.co/u/vibhz)
#### Post date: [December 3, 2020, 5:41pm UTC](https://discuss.elastic.co/t/location-based-dashboard/257559/1 "2020-12-03T17:41:14Z")
Hi, I am trying to create location based dashboard in kibana. location details are not available in the log message, we have to add a logic to map these. Please help.
Usecase : Each location contains 400 servers, once we click on the location, all 400 servers should be displayed in the dashboard. Winlogbeat is installed in each server and sending logs.
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [December 4, 2020, 1:45am UTC](https://discuss.elastic.co/t/location-based-dashboard/257559/2 "2020-12-04T01:45:49Z")
Welcome to our community! 😃
How are you going to figure out the location if there is nothing in the logs to calculate that on?
---
### Author:  [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [December 4, 2020, 4:14am UTC](https://discuss.elastic.co/t/location-based-dashboard/257559/3 "2020-12-04T04:14:13Z")
What is your pipeline, do you have logstash or are you sending your logs directly to elasticsearch?
I had a simular use case a couple of years ago.
You will need something in your messages to identify the location, since your original log message does not have anything like that, you will need to enrich your data or use other information, like the server ip, to find the location.
With winlogbeat you can use the [`add_fields`](https://www.elastic.co/guide/en/beats/winlogbeat/master/add-fields.html) processor to add a new field with some information that you can use later, for example you can have a field with the name `location_name` and the value `myLocation`, but you would need to do this in every `winlogbeat.yml`.
You can also use Logstash and the `translate` field to map the location based on the server ip, for example.
Something like:
```auto
translate {
field => "[field_with_ip_address]"
destination => "[field_to_save_the_location_name_or_coordinates]"
regex => true
dictionary => {
"10.0.*" => "location 1"
"10.1.*" => "location 2"
"10.2.*" => "location 3"
}
fallback => "location not found"
}
```
In the above example the `translate` filter will use regex to match each ip range to a specific location, assuming that the IP address range are different for each location.
In both ways you will need a field with some information that you can map to a location, without knowing more about your deployment there is no way to know which one is better.
---
### Author:  [@vibhz](https://discuss.elastic.co/u/vibhz)
#### Post date: [December 4, 2020, 10:39am UTC](https://discuss.elastic.co/t/location-based-dashboard/257559/4 "2020-12-04T10:39:22Z")
Hello, The location details are given separately in a document and expectation is to map it in kibana with winlogbeat servers.
---
### Author:  [@fadjar340](https://discuss.elastic.co/u/fadjar340)
#### Post date: [December 4, 2020, 11:22am UTC](https://discuss.elastic.co/t/location-based-dashboard/257559/5 "2020-12-04T11:22:51Z")
Better you read this to enrich your index from winlogbeat using pipeline:
> **[Example: Enrich your data based on exact values | Elasticsearch Reference...](https://www.elastic.co/guide/en/elasticsearch/reference/7.10/match-enrich-policy-type.html)**
I suggest put all the servers information into specific index into elasticsearch, then build the enrich policy and pipeline, last but not least, put the pipeline into winlogbeat output.elasticsearch.
Regards,
Fadjar340
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 1, 2021, 11:23am UTC](https://discuss.elastic.co/t/location-based-dashboard/257559/6 "2021-01-01T11:23:04Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.