Palo Alto Networks - Logstash > Elastic > Kibana

I'd start with a template to tell elasticsearch that that field is a geo_point.