I\'m trying to get a tile map visualization working in Kibana 4.0.1.
I can see the geoip.location data in the Discover section but when I go to Visuali
just want to extract some useful information to a separate answer - maybe it'll be useful to someone.
Logstash elasticsearch template matches only templates with "logstash-" prefix. That's why geoip.location field is double, not geo_point, when you use a different index name (like firewall*) without your custom template.
check this issue, if you need more information - https://github.com/elastic/logstash/issues/3137