# Visualize Map Problems **URL:** \ **Category:** Kibana\ **Created:** [June 2, 2017, 3:30pm UTC](https://discuss.elastic.co/t/visualize-map-problems/88107 "2017-06-02T15:30:20Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![lewis15](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lewis15/32/19088_2.png) [@lewis15](https://discuss.elastic.co/u/lewis15)\ **Post date:** [June 2, 2017, 3:30pm UTC](https://discuss.elastic.co/t/visualize-map-problems/88107/1 "2017-06-02T15:30:20Z")
Winlogbeat-\* index has geoip.location as number Using the guide [https://www.elastic.co/blog/monitoring-windows-logons-with-winlogbeat](https://www.elastic.co/blog/monitoring-windows-logons-with-winlogbeat) geoip.location was empty when examining event logs 4624. After following the instructions in the guide geoip.location was populated with information, but geo\_point was not referenced to geoip.location filebeat-\* index has geoip.location as geo\_point but the map will not displat any geo\_points - just a map with a red dot. Used the guide [https://www.elastic.co/blog/geoip-in-the-elastic-stack](https://www.elastic.co/blog/geoip-in-the-elastic-stack) to setup filebeat. My map: \ **Author:** ![lewis15](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lewis15/32/19088_2.png) [@lewis15](https://discuss.elastic.co/u/lewis15)\ **Post date:** [June 2, 2017, 3:35pm UTC](https://discuss.elastic.co/t/visualize-map-problems/88107/2 "2017-06-02T15:35:07Z") ![](https://us1.discourse-cdn.com/elastic/original/3X/7/a/7aca25a9ffa039bbac5b90d5c8bfbe618e99b826.png) ---
**Author:** ![weltenwort](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/weltenwort/32/53885_2.png) [@weltenwort](https://discuss.elastic.co/u/weltenwort)\ **Post date:** [June 6, 2017, 11:44am UTC](https://discuss.elastic.co/t/visualize-map-problems/88107/3 "2017-06-06T11:44:49Z")
Regarding the Winlogbeat problem: > [@lewis15](#): > > geo\_point was not referenced to geoip.location I'm afraid I can't follow you there. `geo_point` is the data type used for the `geoip.location` field in the blog post you linked. Could you maybe rephrase the problem statement? As for the Filebeat problem: Have you made certain that there are documents that are within the time interval selected in the time picker (if your index is configured as a time-based index)? Using the small upwards-pointing arrow in the lower left corner of the map you can show the raw data underlying the visualization as well details about the request, which might help your while debugging. ---
**Author:** ![lewis15](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lewis15/32/19088_2.png) [@lewis15](https://discuss.elastic.co/u/lewis15)\ **Post date:** [June 6, 2017, 3:25pm UTC](https://discuss.elastic.co/t/visualize-map-problems/88107/4 "2017-06-06T15:25:38Z")
> [@weltenwort](#): > > ed to geoip.location > > I'm afraid I can't follow yo I can understand why you can't follow me, becaust I don't know what I am doing. I have been reading a lot, but most of what I am reading doesn't make much sense. So I will try to explain better. I used the guide [GeoIP in the Elastic Stack - Elasticsearch, Logstash, Ingest API | Elastic Blog](https://www.elastic.co/blog/geoip-in-the-elastic-stack) to setup filebeat. Firts part of my map. ![](https://us1.discourse-cdn.com/elastic/original/3X/c/f/cf0eafc02e3485a203e5e012b91dbfdcf558815c.png) I don't know if geo\_point is properly referenced. The second part of the map: ![](https://us1.discourse-cdn.com/elastic/original/3X/f/d/fd9d5bbe8c1a759553c9b16f6e56643593c12e0d.png) A map with no points. The third part of the map: ![](https://us1.discourse-cdn.com/elastic/original/3X/d/5/d50d91df7cfd8a6d19dfdac29f4525ad2a1fef1e.png) I clicked on the down arrow, but I don't know what the 80 count means. The Request screenshot: ![](https://us1.discourse-cdn.com/elastic/original/3X/2/f/2ff6c22aa41ae1bbf94bbd4f3156177458bd2153.png) The Response screenshot: ![](https://us1.discourse-cdn.com/elastic/original/3X/5/4/54af10bb4bb7179e79ba096e1469f7b26c4ec1f7.png) The Statistics screenshot: ![](https://us1.discourse-cdn.com/elastic/original/3X/f/4/f415001092e2ce7b706138812210e4ac3f1b16b3.png) Geoip.location: ![](https://us1.discourse-cdn.com/elastic/original/3X/f/8/f8533a6fa6e359c37798c16042f84473d3d6595d.png) Log info: ![](https://us1.discourse-cdn.com/elastic/original/3X/8/7/878f1d4790491d2f48f25828207c6beca4fa57bc.png) Does this help? If not, what info do you need & how may I collect it? Thanks ---
**Author:** ![weltenwort](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/weltenwort/32/53885_2.png) [@weltenwort](https://discuss.elastic.co/u/weltenwort)\ **Post date:** [June 6, 2017, 4:13pm UTC](https://discuss.elastic.co/t/visualize-map-problems/88107/5 "2017-06-06T16:13:17Z")
Did you click the ▶ button at the top to apply the geo hash aggregation? The request and response show no indication that a geohash aggregation has been applied. ---
**Author:** ![lewis15](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lewis15/32/19088_2.png) [@lewis15](https://discuss.elastic.co/u/lewis15)\ **Post date:** [June 7, 2017, 2:30pm UTC](https://discuss.elastic.co/t/visualize-map-problems/88107/6 "2017-06-07T14:30:59Z")
Thanks, I now know what to look for in the Response tab. Apparently the Apply Block in the Youtube videos has been changed to the ▶ button at the top. Thanks again. ---
**Author:** ![lewis15](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lewis15/32/19088_2.png) [@lewis15](https://discuss.elastic.co/u/lewis15)\ **Post date:** [June 8, 2017, 12:42pm UTC](https://discuss.elastic.co/t/visualize-map-problems/88107/7 "2017-06-08T12:42:39Z")
After some failed attempts to create mpas with points I discovered the steps to put points on the map ![](https://us1.discourse-cdn.com/elastic/original/3X/7/4/741d655905cef2f39e5e2575527114b80644671f.png) Then : ![](https://us1.discourse-cdn.com/elastic/original/3X/8/4/8474e2f5d0a233a90c7d8a86182d0e65bea78927.png) Bingo! ![](https://us1.discourse-cdn.com/elastic/original/3X/d/3/d3b1e68455c11f6ed8f526b59b302ec54b2a3e81.png) Looks like the Russians are busy. Thanks for all your help. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 12:42pm UTC](https://discuss.elastic.co/t/visualize-map-problems/88107/8 "2017-07-06T12:42:44Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.