Hi, I am using logstash to process the data of 2 pfsense, I create 2 indexes pfsense1 and pfsense2.
But when creating visualization on geo.location it reported an error: The index pattern pfsense1 * does not contain any of the following compatible field types: geo_point.
Here is my "geo" configuration at run GET pfsense1-2019.10.17:
"geoip" : {
"properties" : {
"city_name" : {
"type" : "text",
"fields" : {
"keyword" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
Help me fix it. thank you.