# Tile map not plotting location

**URL:** <https://discuss.elastic.co/t/tile-map-not-plotting-location/58279>\
**Category:** Logstash\
**Created:** [August 17, 2016, 5:49pm UTC](https://discuss.elastic.co/t/tile-map-not-plotting-location/58279 "2016-08-17T17:49:24Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![bishaka](https://avatars.discourse-cdn.com/v4/letter/b/e480ec/32.png) [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Post date:** [August 17, 2016, 5:49pm UTC](https://discuss.elastic.co/t/tile-map-not-plotting-location/58279/1 "2016-08-17T17:49:24Z")

</div>

Hi There, I am not sure if it's a logstash, elasticsearch or kibana question..but if you could help me out with this..i would greatly appreciate it.

I am having trouble displaying locations in the map.  
I am using Kibana 4.5.4  
Logstash 2.3.4  
Elasticsearch 2.3.5

My mapping for geofield looks like the following in ES:

```
 {
      "geo_point_fields" : {
        "mapping" : {
          "type" : "geo_point",
          "doc_values" : true
        },
        "match" : "*",
        "match_mapping_type" : "geo_point"
      }
    } ],

```

I do have a field geo.location with the type geo.point when I check mapping...however, when i go to tile map visualition, choose geohash as the aggregation and geoip.location as the field...nothing shows up on the visualition...it simply says "No results found"

I have IP addresses in my logs and I simply want to convert them onto LAT and LONG to be able to plot in Tile Map. And I believe it's converting to that..just not plotting it..

I can't figure out why it's doing this.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 17, 2016, 7:34pm UTC](https://discuss.elastic.co/t/tile-map-not-plotting-location/58279/2 "2016-08-17T19:34:21Z")

</div>

> [@bishaka](#):
>
> I have IP addresses in my logs and I simply want to convert them onto LAT and LONG to be able to plot in Tile Map. And I believe it's converting to that..just not plotting it..

Providing your config would be useful.

---

<div class="post-metadata">

**Author:** ![bishaka](https://avatars.discourse-cdn.com/v4/letter/b/e480ec/32.png) [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Post date:** [August 17, 2016, 8:52pm UTC](https://discuss.elastic.co/t/tile-map-not-plotting-location/58279/3 "2016-08-17T20:52:24Z")

</div>

I have 2 different config files on 2 different servers.. One is forwarding the logs and one is indexing the logs to be fed into ES.. and I am using redis as the messeging queue..

Below is the logstash forwarder

> input {  
> file {  
> path =\> ["/logs/iot\_report.log"]  
> type =\> "iot\_reportlog"  
> start\_position =\> "beginning"  
> sincedb\_path =\> "/dev/null"  
> ignore\_older =\> 0  
> }  
> file {  
> path =\> ["/logs/iot\_access.log"]  
> type =\> "iot\_accesslog"  
> start\_position =\> "beginning"  
> sincedb\_path =\> "/dev/null"  
> ignore\_older =\> 0  
> }  
> }

> filter {  
> if [type] == "iot\_reportlog" {  
> grok {  
> # match =\> ["message", "%{TIMESTAMP\_ISO8601:todaysdate} %{SECOND:seconds}%{NOTSPACE}%{WORD:Username}%{NOTSPACE}%{WORD:Vendorname}%{NOTSPACE}%{BASE16N#UM:bytes}"]  
> match =\> ["message", "%{TIMESTAMP\_ISO8601:todaysdate}%{NOTSPACE}%{WORD:Username}%{NOTSPACE:Vendorname}%{NOTSPACE}%{BASE16NUM:bytes}"]  
> }

> ```
> date {
> locale => "en"
> match => ["todaysdate", "YYYY-MM-dd HH:mmss"]
> remove_field => ["todaysdate"]
> }
> 
> ```
> 
> }

> if [type] == "iot\_accesslog" {  
> grok {  
> # match =\> ["message", "%{NOTSPACE:TIME}%{BASE10NUM}%{SPACE}%{WORD}%{SPACE}%{NOTSPACE} %{NOTSPACE} %{NOTSPACE:queueNum} %{NOTSPACE} %{NOTSPACE} %{NOT#SPACE} %{NOTSPACE} %{NOTSPACE} %{NOTSPACE} |%{NOTSPACE:Username}|%{NOTSPACE:VendorName}|%{NOTSPACE:url}"]  
> match =\> ["message", "%{NOTSPACE:TIME}%{BASE10NUM}%{SPACE}%{WORD}%{SPACE}%{NOTSPACE} %{NOTSPACE} %{NOTSPACE} %{NOTSPACE} %{NOTSPACE} %{NOTSPACE} %{NOTSPACE} %{NOTSPACE} %{NOTSPACE} |%{NOTSPACE:Username}|%{NOTSPACE:VendorName}|%{NOTSPACE:url}%{IP:clientip}"]  
> }

> geoip {  
> source =\> "clientip"  
> target =\> "geoip"  
> database =\> "/etc/logstash/GeoLiteCity.dat"  
> add\_field =\> ["[geoip][coordinates]", "%{[geoip][longitude]}" ]  
> add\_field =\> ["[geoip][coordinates]", "%{[geoip][latitude]}" ]  
> }  
> mutate {  
> convert =\> ["[geoip][coordinates]", "float"]  
> }  
> }  
> }

> output {  
> stdout { codec =\> rubydebug }  
> redis { host =\> "44.98.33.111" data\_type =\> "list" key =\> "iot2" }  
> }

Below is the logstash indexer

> input {  
> file {  
> type =\> "iot\_reportlog"  
> path =\> ["/logs/iot\_report.log"]  
> sincedb\_path =\> "/dev/null"  
> start\_position =\> "beginning"  
> }

> file {  
> type =\> "iot\_accesslog"  
> path =\> ["/logs/iot\_access.log"]  
> sincedb\_path =\> "/dev/null"  
> start\_position =\> "beginning"  
> }

> redis {  
> host =\> "44.98.33.111"  
> data\_type =\> "list"  
> key =\> "iot2"  
> codec =\> json  
> }  
> }

> output {  
> elasticsearch { hosts =\> ["44.98.33.111"]  
> index =\> "logstash-%{+YYYY.MM.dd}"
> 
> # index =\> "iotlogs"
> 
> }  
> stdout { codec =\> rubydebug }  
> }

My log file looks like the following:

> 00:00:01,194 INFO [ACTIVE] ExecuteThread: '46' for queue: 'weblogic.kernel.Default (self-tuning)' access:14 - |farsali|getServiceAgreement|[https://20.198.199.56:443/service/soap/v1/ProductManagement](https://20.198.199.56:443/service/soap/v1/ProductManagement)

This is what I see when I try to visualize Tile Map with the logs in Kibana:

 ![](https://us1.discourse-cdn.com/elastic/original/2X/d/d6677aeacde92816b09b59a6e9884c89be701822.PNG)

---

<div class="post-metadata">

**Author:** ![bishaka](https://avatars.discourse-cdn.com/v4/letter/b/e480ec/32.png) [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Post date:** [August 18, 2016, 9:50pm UTC](https://discuss.elastic.co/t/tile-map-not-plotting-location/58279/4 "2016-08-18T21:50:56Z")

</div>

Please help with this!!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:42am UTC](https://discuss.elastic.co/t/tile-map-not-plotting-location/58279/5 "2017-07-06T04:42:39Z")

</div>


