Logstash help with geoip mapping from csv file

[Badger]

@mmalisa12

geoip{
source => "SrcAddr","DstAddr"
}

Try

geoip{ source => "SrcAddr" }

That will add a field called geoip which should show up in kibana as a geo_point. Then use a second filter for the second field

geoip { source => "DstAddr" target => "someField" }

That will not be a geo_point unless you add a mapping template. This thread might help with that. Then you can change the target of the first filter as well