No Compatible Fields - GeoIP

Elastic Stack Elasticsearch
1

Hello I’ve put together the NetFlow codec with GeoIP and
configured the parts in logstash, they now appear as indexable fields in
Kibana4 but when I attempt to Visualise the data suign the Tile Map I receive
the below using GeoHash:

“No Compatible Fields: The
"[logstash_netflow5-]YYYY.MM.DD" index pattern does not contain any
of the following field types: geo_point”

I understand this may be to do with missing mappings but I’m
not sure where to start with that.

2

Can you start by supplying the mapping you do have and then figure out next steps (the question may be better handled in the Logstash or Kibana forums but let's explore more here first)

3

Hi,

This is the mapping I used:

    {
  "template" : "logstash_netflow*",
  "mappings" : {
    "netflow" : {
      "properties" : {
        "dst_geoip" : {
          "properties" : {
            "location" : {"type":"geo_point"}
          }
        },
       "src_geoip" : {
         "properties" : {
           "location" : {"type":"geo_point"}
         }
       }
     }
   }
 }
}'

If I run "curl -XGET http://localhost:9200/_template/logstash_netflow_template" I get:

{"logstash_netflow_template":{"order":0,"template":"logstash_netflow*","settings":{},"mappings":{"netflow":{"properties":{"dst_geoip":{"properties":{"location":{"type":"geo_point"}}},"src_geoip":{"properties":{"location":{"type":"geo_point"}}}}}},"aliases":{}}}

Thanks

4

Hi, is there any recommendations to resolve this? Thanks.