Stitching state,city to something I can use in geography map

Elastic Stack Kibana
1

Hello and thank you for reading my question.

I have incoming data that includes the city and state/country from which the data is coming.
My goal is to create a visual that can handle the city and state/country.

Can anyone suggest how in Kibana I can:

  1. Combine 2 fields together to a new field with a comma in the middle? (example: "Frankfurt, Germany")
  2. Make this new field usable in the geography view?

Thanks in advance !
JD

2

Hi JD,

You can create a scripted field to join those fields together, under Management > Index Patterns > Scripted Fields. The field will look something like this:

doc['city.raw'].value.concat(','.concat(doc['country.raw'].value))

In terms of visualizations, how you use this data depends on whether you're creating a Coordinate Map or Region Map visualization.

For a Coordinate Map, you'd have to provide lat/long data when the data is ingested. For example, if you're using Logstash to get data into ES, you could use the Geoip filter plugin.

If you're using a Region Map, you can add a vector map with custom joins, to associate something like "Frankfurt,Germany" to an area on the map. Take a look at the docs for more info.

Hope this helps!

Thanks,
CJ

1 Like
3

Thank you I appreciate the advice and the quick response.
JD

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.