# Type Geo\_Point **URL:** \ **Category:** Logstash\ **Created:** [June 5, 2017, 7:40am UTC](https://discuss.elastic.co/t/type-geo-point/88239 "2017-06-05T07:40:31Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![1623664](https://avatars.discourse-cdn.com/v4/letter/1/58956e/32.png) [@1623664](https://discuss.elastic.co/u/1623664)\ **Post date:** [June 5, 2017, 7:40am UTC](https://discuss.elastic.co/t/type-geo-point/88239/1 "2017-06-05T07:40:31Z")
> input { > jdbc { > jdbc\_driver\_library =\> "/home/cuckoo/cuckoo/logstash-5.2.2/mariadb-java-client-1.5.9.jar" > jdbc\_driver\_class =\> "org.mariadb.jdbc.Driver" > jdbc\_connection\_string =\> "jdbc:mariadb://100.1100.100.100:3306/snort" > jdbc\_user =\> "logstash" > jdbc\_password =\> "Password" > schedule =\> "/3 \* \* \* \*" > statement =\> "SELECT signature,sig\_name,timestamp,INET\_NTOA(ip\_src),sig\_priority FROM acid\_event WHERE timestamp BETWEEN DATE\_SUB(NOW(), INTERVAL 3 minute) and NOW();" > type =\> "snort\_log" > } > } > filter > { > if [type] == "snort\_log" > { > grok > { > match =\> {"message" =\> "%{COMBINEDAPACHELOG}"} > } > geoip > { > source =\> "inet\_ntoa(ip\_src)" > target =\> "geoip" > database =\> "/home/cuckoo/cuckoo/data/GeoIP.mmdb" > } > mutate { > add\_field =\> ["[geo][location]","%{[geoip][longitude]}"] > add\_field =\> ["[geo][location]","%{[geoip][latitude]}"] > } > mutate { > convert =\> ["[geo][location]","float"] > } > } > } > output > { > elasticsearch { > action =\> "index" > hosts =\> "127.0.0.1:9200" > index =\> "snort3" > workers =\> 1 > } > stdout { codec =\> dots } > } What am I doing wrong? ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 5, 2017, 9:17am UTC](https://discuss.elastic.co/t/type-geo-point/88239/2 "2017-06-05T09:17:13Z")
It's not clear what you are expecting versus what you are seeing, so it's hard to say. ---
**Author:** ![1623664](https://avatars.discourse-cdn.com/v4/letter/1/58956e/32.png) [@1623664](https://discuss.elastic.co/u/1623664)\ **Post date:** [June 5, 2017, 9:39am UTC](https://discuss.elastic.co/t/type-geo-point/88239/3 "2017-06-05T09:39:28Z")
Kibana Map does not contain data of type Geo\_Point ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 5, 2017, 9:40am UTC](https://discuss.elastic.co/t/type-geo-point/88239/4 "2017-06-05T09:40:35Z")
Have a read of [https://www.elastic.co/blog/geoip-in-the-elastic-stack](https://www.elastic.co/blog/geoip-in-the-elastic-stack) ---
**Author:** ![1623664](https://avatars.discourse-cdn.com/v4/letter/1/58956e/32.png) [@1623664](https://discuss.elastic.co/u/1623664)\ **Post date:** [June 5, 2017, 12:31pm UTC](https://discuss.elastic.co/t/type-geo-point/88239/5 "2017-06-05T12:31:26Z")
``` {"cuckoo_template":{"order":0,"template":"cuckoo-*","settings":{"index":{"codec":"best_compression","mapping":{"coerce":"true"},"number_of_shards":"1","number_of_replicas":"0"}},"mappings":{"irma":{"dynamic_templates":[{"notanalyzed":{"mapping":{"index":"not_analyzed","type":"string","doc_values":"True"},"match_mapping_type":"string","match":"*"}}],"properties":{"timestamp_first_scan":{"format":"epoch_millis","type":"date"},"timestamp_last_scan":{"format":"epoch_millis","type":"date"}}},"call":{"dynamic_templates":[{"not_analyzed":{"mapping":{"ignore_above":32766,"index":"not_analyzed","type":"string"},"match_mapping_type":"string","match":"*"}},{"call_arguments":{"path_match":"arguments.*","mapping":{"ignore_above":32766,"index":"not_analyzed","type":"string"},"match_mapping_type":"long","match":"*"}}],"date_detection":false,"properties":{"report_time":{"format":"epoch_second","type":"date"}}},"cuckoo":{"dynamic_templates":[{"not_analyzed":{"mapping":{"ignore_above":32766,"index":"not_analyzed","type":"string"},"match_mapping_type":"string","match":"*"}},{"signatures":{"path_match":"signatures.marks.call.arguments.*","path_unmatch":"signatures.marks.call.arguments.registers.*","mapping":{"ignore_above":32766,"index":"not_analyzed","type":"string"},"match_mapping_type":"long","match":"*"}}],"date_detection":false,"properties":{"report_time":{"format":"epoch_second","type":"date"},"procmemory":{"include_in_root":"True","type":"nested","properties":{"regions":{"include_in_root":"True","type":"nested"}}}}}},"aliases":{}},"logstash":{"order":0,"version":50001,"template":"logstash-*","settings":{"index":{"refresh_interval":"5s"}},"mappings":{"_default_":{"dynamic_templates":[{"message_field":{"path_match":"message","mapping":{"norms":false,"type":"text"},"match_mapping_type":"string"}},{"string_fields":{"mapping":{"norms":false,"type":"text","fields":{"keyword":{"type":"keyword"}}},"match_mapping_type":"string","match":"*"}}],"_all":{"norms":false,"enabled":true},"properties":{"@timestamp":{"include_in_all":false,"type":"date"},"geoip":{"dynamic":true,"properties":{"ip":{"type":"ip"},"latitude":{"type":"half_float"},"location":{"type":"geo_point"},"longitude":{"type":"half_float"}}},"@version":{"include_in_all":false,"type":"keyword"}}}},"aliases":{}}} ``` ---
**Author:** ![1623664](https://avatars.discourse-cdn.com/v4/letter/1/58956e/32.png) [@1623664](https://discuss.elastic.co/u/1623664)\ **Post date:** [June 5, 2017, 12:33pm UTC](https://discuss.elastic.co/t/type-geo-point/88239/6 "2017-06-05T12:33:14Z")
No Compatible Fields: The "\*" index pattern does not contain any of the following field types: geo\_point ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 3, 2017, 12:33pm UTC](https://discuss.elastic.co/t/type-geo-point/88239/7 "2017-07-03T12:33:59Z")
Closed on July 3, 2017, 12:33pm UTC This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.