Map dashboard

[markov00 (Marco Vettorello)]

Hi @suresh123

How to create the map metric dashboard with out having geo ip.

It really depends on your usecase, if you have a geopoint field in your index you can use that on your maps, doesn't needs to be a geoip.

For the second topic, please check this other post. This should create an index field called geoip but your index template needs to be aligned with that field type.

Can we create two GeoIP Filters in one logstash config file?

Hi Cody, This is what you need to do . Assuming you are using ES1.7.X, because things are slight different if you are on ES2.X step 1 --> In LS you need to update target for src_geoip and dst_geoip as geoip , something like (be sure src and dst fields should be IP type) geoip { source => "src" target => "srcgeoip" } geoip {source => "dst" target => "dstgeoip" } Step 2) In ES template or using API you need to map fields to Geo_point "srcgeoip" : {"type" : "object","dynamic": true,"path": "f…