Hi all,
when I try to create a "Coordinate Map" I receive the following error message:
No Compatible Fields: The "logstash-*" index pattern does not contain any of the following field types: geo_point
My coordinates are converted into the following logstash config file:
filter {
...
grok {
match => { "iotEvent_location" => "%{NUMBER:lon} %{NUMBER:lat}" }
}
mutate {
rename => [ "lat", "[geoComplaint][location][lat]", "lon", "[geoComplaint][location][lon]" ]
}
mutate {
convert => [ "[geoComplaint][location][lat]", "float" ]
convert => [ "[geoComplaint][location][lon]", "float" ]
}
}
output {
elasticsearch {
hosts => "localhost:9200"
index => "logstash-%{+dd.MM.YYYY}"
document_type => "iotEvent"
template => "/Users/iBianchi/Documents/_dev-tools/logstash-6.0.0/bin/logstash.json"
template_name => "logstash"
template_overwrite => true
}
}
This is an extract of the mapping file I pass to logstash:
"mappings": {
"iotEvent": {
"properties": {
...
"geoComplaint": {
"dynamic": true,
"type": "object",
"path": "full",
"properties": {
"location": {
"type": "geo_point"
}
},
},
...
"dynamic_templates": [
{
"string_template": {
"match": "*",
"match_mapping_type": "string",
"mapping": {
"type": "keyword"
}
}
}
]
This is an extract of the mapping file returned by Elastic Search:
"geoComplaint" : {
"properties" : {
"location" : {
"properties" : {
"lat" : {
"type" : "float"
},
"lon" : {
"type" : "float"
}
}
}
}
}
Finally, this is a document indexed by Elasticsearch:
{
"_index": "logstash-05.12.2017",
"_type": "iotEvent",
"_id": "AWAq_n3-cKCic2a1eVPM",
"_version": 1,
"_score": null,
"_source": {
"event_certainty": 1,
"geoComplaint": {
"location": {
"lat": 7.61528,
"lon": 45.15471
}
},
"body": "<SP V=\"62\" P=\"3\" E=\"35476\" S=\"35477\"/>",
"version": 1,
"event_type_id": 0,
"iotEvent_location": "45.15471-7.61528",
"@timestamp": "2017-12-05T04:36:20.000Z",
"iotEvent_source": "http://services.infoblu.it/BITW/data?id=teamd26lkc",
"temporal_granularity": null,
"@version": "1",
"attributes": {
"sourceCode": "35477",
"endCode": "35476",
"offset": "3",
"metric": "speed",
"dstCoordinates": "45.13841-7.62777",
"srcCoordinates": "45.15471-7.61528",
"value": "62",
"tags": "sourceCode,endCode,offset"
},
"id": "it.gov.daf.kafkaProducers.eventConverters.InfoBluTrafficConverter.1512448580000.2",
"event_subtype_id": null,
"event_annotation": null,
"coords": "7.61528,45.15471",
"ts": 1512448580000
},
"fields": {
"@timestamp": [
1512448580000
]
},
"sort": [
1512448580000
]
}
I have the same problem using ELK 6.0.0 and ELK 5.6.4.
Can you help me?
Thanks!
