Upgraded to 8.2 and datastream, geo_point set as and stuck as string in data view

[jsanz (Jorge Sanz)]

Also, check this thread and in particular the solution comment in case you are hitting the same issue

Map data not displaying in 8.2.0

HI, I found what the problem is. I'm not 100% sure when the change was introduced, possibly 7.17 but if you don't set ecs_compatibility => disabled in your logstash file(filter) you will have conflicting mappings. Basically you end up with mixture of ECS geo mappings and your existing defined mappings. To resolve this: filter { geoip { source => "[host][ip]" ecs_compatibility => disabled } } Ref: https://www.elastic.co/guide/en/logstash/7.17/ecs-ls.html https://www.elastic.co/g…