Transforming logs into geo_point to draw them in kibana

Elastic Stack Elasticsearch
9

Hi leandro,

What I mean is that - now and from what I've been able to gather from all the tests I've done. I am sure that I have made many combinations.

The "geo" field is created by the geoip filter itself. Yes or yes.

Therefore, it is the one that must be created to receive the geo_point type values with the "location" field. So if you don't create the field you .. or create a different one - he will create it and add the results of the function in all its fields - location will be a tuple of numeric values. Unless you go ahead and create it yourself of type geo_point.

That has been my deduction after many many tests.
I may be wrong though - I would encourage you to try it on version 8.x... at least I think so.

geoip {

     source => "dst_ip"
     target => "whatever"

}

whatever (objet) - geo (objet) - location (geo-point)

Thanks again for your help :wink: