Logstash Mutate add_field geo_point

I am having an issue getting geo_point data into Kibana from a Security Appliance

Here is my logstash .conf file

mutate {
add_field => { "[location][lat]" => "%{[geoip][latitude]}" }
add_field => { "[location][lon]" => "%{[geoip][longitude]}" }
}
mutate {
convert => {"[location][lat]" => "float"}
convert => {"[location][lon]" => "float"}
}

But here is what is output in Kibana

Any advice would be great!

Thanks

Sorry - my mistake

I had put the mutate above the geoip so the fields did not exists at that point!

Thanks Anyway

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.