Set geo location from coodinates

Elastic Stack Logstash
1

Hi
i have latitude+latitude on logstash and i want to set geo point
i tried

add_field =>{ "geoip.location" => 13.55 }
add_field => { "geoip.location" => 5.69 }
and many more permutation of assigning the geoip.location or geoip.coordinates

on kibana i see

but on visualization i always get the same location, no matter what the coordinate are...

Pasted image791×827 240 KB

what am i doing wrong ?
how can i insert a Geo location from latitude+latitude??
thanks a lot
Roy

2

Have you mapped that field to a geopoint in ES?

3

do you mean ::

geoip {
source => "clientip"
target => "geoip"
database => "/etc/logstash/GeoLiteCity.dat"
add_field => [ "[geoip][coordinates]", "%{[geoip][longitude]}" ]
add_field => [ "[geoip][coordinates]", "%{[geoip][latitude]}" ]
}
mutate {
convert => [ "[geoip][coordinates]", "float"]
}

??
because i dont want to use the geo from the IP
i have lat+log
what do you mean be map?

4

In ES you need to map that field to be a geopoint as well.

5

hi, have you tried to add some filter to search(i.e. event:add_biu_propagation)? When i first use geoip the same thing appeard(every point goes to [0, 0]), but then i add some filter to search, every point goes to the right place, and then i stop search with filters (just "*"), every point came to be normal... This is weird, haven't figured it out though

6

Hi Mark, updated link for ES 2.0 is https://www.elastic.co/guide/en/elasticsearch/reference/current/geo-point.html
:smile: