Unable to put dstip_geoip.location on map

[LeeDr (Lee Drengenberg)]

Hi Frank,
I'm going to refer you to some logstash posts like;

Add Geopoint based off of parsed value to logstash config

Is that what's in your configuration file? Because it barely resembles Logstash's configuration file syntax. You need something like this: filter { if [XCent] and [YCent] { mutate { add_field => { "[location][lat]" => "%{XCent}" "[location][lon]" => "%{YCent}" } } mutate { convert => { "[location][lat]" => "float" "[location][lon]" => "float" } } } }

You can also search that logstash forum for geopoint to find other posts about it.

If you're still having problems, please post another question there. Also, please include the logstash version you're using as things do change from release to release.

Regards,
Lee