# Mapping geoIP connections in Kibana?

**URL:** <https://discuss.elastic.co/t/mapping-geoip-connections-in-kibana/156140>\
**Category:** Kibana\
**Created:** [November 10, 2018, 1:22pm UTC](https://discuss.elastic.co/t/mapping-geoip-connections-in-kibana/156140 "2018-11-10T13:22:30Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sgreszcz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sgreszcz/32/46322_2.png) [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\
**Post date:** [November 10, 2018, 1:22pm UTC](https://discuss.elastic.co/t/mapping-geoip-connections-in-kibana/156140/1 "2018-11-10T13:22:30Z")

</div>

I've found tutorials on how to map lat/long data on Kibana maps. I have not been able to find anything on how to map connections between those Geolocation points.

My use case is to map GeoIP network packet flows that I've picked up from netflow and have enriched in Logstash using a MaxMind database.

I've found many Tableau tutorials such as [https://onlinehelp.tableau.com/current/pro/desktop/en-us/maps\_howto\_origin\_destination.htm](https://onlinehelp.tableau.com/current/pro/desktop/en-us/maps_howto_origin_destination.htm) but nothing for Elastic/Kibana.

---

<div class="post-metadata">

**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\
**Post date:** [November 12, 2018, 10:34pm UTC](https://discuss.elastic.co/t/mapping-geoip-connections-in-kibana/156140/2 "2018-11-12T22:34:48Z")

</div>

> [@sgreszcz](#):
>
> w to map lat/long data on Kibana maps. I have not been able to find anything on how to map connections between those Geolocation points.
> 
> My use case is to map GeoIP network packet flows that I've picked up from netflow and have enriched in Logstash using a MaxMind database.
> 
> I've found many Tableau tutorials suc

@thomasneirynck - any helpful hints here ? I haven't played around with maps- lat/long data on Kibana maps much.

Thanks  
Rashmi

---

<div class="post-metadata">

**Author:** ![sgreszcz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sgreszcz/32/46322_2.png) [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\
**Post date:** [November 13, 2018, 1:54pm UTC](https://discuss.elastic.co/t/mapping-geoip-connections-in-kibana/156140/3 "2018-11-13T13:54:54Z")

</div>

Any help would be great! I can't even get basic IP enrichment working. [Logstash geoip filter error: \_geoip\_lookup\_failure](https://discuss.elastic.co/t/logstash-geoip-filter-error-geoip-lookup-failure/156484)

---

<div class="post-metadata">

**Author:** ![thomasneirynck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thomasneirynck/32/23313_2.png) [@thomasneirynck](https://discuss.elastic.co/u/thomasneirynck)\
**Post date:** [November 19, 2018, 5:22pm UTC](https://discuss.elastic.co/t/mapping-geoip-connections-in-kibana/156140/4 "2018-11-19T17:22:42Z")

</div>

hi @sgreszcz,

mapping connections in the way you describe is currently not supported in Kibana. I'd suggest you create a new feature request: [https://github.com/elastic/kibana/issues/new](https://github.com/elastic/kibana/issues/new)

the team is working on a new geo-solution, so it would be good to bring this on their radar. that new solution will support mapping geo\_shapes, so if your to-and-from point are stored as a LineString with two points, that upcoming solution will help you map those connections.

For the geo-ip plugin, I would post this in the logstash forum: [https://discuss.elastic.co/c/logstash](https://discuss.elastic.co/c/logstash)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 17, 2018, 5:22pm UTC](https://discuss.elastic.co/t/mapping-geoip-connections-in-kibana/156140/5 "2018-12-17T17:22:52Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.