I have a field dstip_geoip.location which contains coordinates however when I go to create a visualization for this data I am unable to select dstip_geoip.location from the drop down list, I only have geoip.location which produces "No Results Found :(" If I use discover I am able to see my data and it maps it correctly to the location using the dstip_geoip.city_name and dstip_geoip_country_name fields.
Hi Frank
Can you check your mapping of that index. You can use something like this;
http://localhost:9200/logstash-0/_mapping
And you should find a "type": "geo_point" for your data. If not, you might have to look into your mapping.
Regards,
Lee
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.