# Problem with geoip.location field conflict

**URL:** <https://discuss.elastic.co/t/problem-with-geoip-location-field-conflict/73483>\
**Category:** Kibana\
**Created:** [February 1, 2017, 8:55am UTC](https://discuss.elastic.co/t/problem-with-geoip-location-field-conflict/73483 "2017-02-01T08:55:32Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ruby](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@ruby](https://discuss.elastic.co/u/ruby)\
**Post date:** [February 1, 2017, 8:55am UTC](https://discuss.elastic.co/t/problem-with-geoip-location-field-conflict/73483/1 "2017-02-01T08:55:32Z")

</div>

hello,

I am facing an issue with the geoip.location.

This is the error screen shot

 ![](https://us1.discourse-cdn.com/elastic/original/2X/c/c0058ce361ab05a6ed19ce6eb43110823dc7aae6.png)

The filebeat indexed template is

```auto
{
  "mappings": {
    "_default_": {
      "_all": {
        "enabled": true,
        "norms": {
          "enabled": false
        }
      },
      "dynamic_templates": [
        {
          "template1": {
            "mapping": {
              "doc_values": true,
              "ignore_above": 1024,
              "index": "not_analyzed",
              "type": "{dynamic_type}"
            },
            "match": "*"
          }
        }
      ],
      "properties": {
        "@timestamp": {
          "type": "date"
        },
        "message": {
          "type": "string",
          "index": "analyzed"
        },
        "offset": {
          "type": "long",
          "doc_values": "true"
        },
        "geoip" : {
          "dynamic": true,
          "properties" : {
            "location" : { "type" : "geo_point" }
          }
        }
      }
    }
  },
  "settings": {
    "index.refresh_interval": "5s"
  },
  "template": "filebeat-*"
}

```

---

<div class="post-metadata">

**Author:** ![cjcenizal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cjcenizal/32/11216_2.png) [@cjcenizal](https://discuss.elastic.co/u/cjcenizal)\
**Post date:** [February 1, 2017, 11:44pm UTC](https://discuss.elastic.co/t/problem-with-geoip-location-field-conflict/73483/2 "2017-02-01T23:44:55Z")

</div>

Hi there,

I think you have a mapping conflict. Can you click the "Edit" icon for the field to see the types it's being mapped to for each index? To solve this problem, you'll have to re-index the data that's not actually a geo\_point type.

Does this help? Also, you might try cross-posting in the [Beats forum](https://discuss.elastic.co/c/beats) if you have further Beats-related questions.

Thanks,  
CJ

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [February 1, 2017, 11:55pm UTC](https://discuss.elastic.co/t/problem-with-geoip-location-field-conflict/73483/3 "2017-02-01T23:55:43Z")

</div>

In addition you might want to consider using the standard template that is provided by Filebeat and then "layer" on an additional template for the geoip field like:

```auto
PUT _template/filebeat-1
{
  "order": 1,
  "template": "filebeat-*",
  "mappings": {
    "_default_": {
      "properties": {
        "geoip" : {
          "properties" : {
            "location" : { "type" : "geo_point" }
          }
        }
      }
    }
  }
}

```

Re-indexing is covered [here](https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-reindex.html). Basically you find the indices that aren't using the geo\_point type and reindex them, then delete the old index. Like

```auto
POST _reindex
{
  "source": {
    "index": "filebeat-2017.01.12"
  },
  "dest": {
    "index": "filebeat-2017.01.12a"
  }
}

```

Then once the operation is successful you can delete the old index. Then refresh the kibana mapping and the conflicts should be resolved.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 1, 2017, 11:56pm UTC](https://discuss.elastic.co/t/problem-with-geoip-location-field-conflict/73483/4 "2017-03-01T23:56:24Z")

</div>

Closed on March 1, 2017, 11:56pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.