Logstash grok/mutate question

You can use mutate

 mutate{
     rename=>["latitude","location[lat]"]
     rename=>["longitude","location[lon]"]
 }

The harder part is making sure your index template establishes a mapping that causes location to be a geo_point. This thread might help you with that.