Tile Map geo.location field not present under GeoHash aggregation in Kibana 4.0.1

Question

I\'m trying to get a tile map visualization working in Kibana 4.0.1.

I can see the geoip.location data in the Discover section but when I go to Visuali

Answer 1

Kibana is using the mapping of the field to determine if it's a geo_point and therefore can be used in the map.

So, you should check your mapping and change the field to a geo_point.

See the doc.

Answer 2

just want to extract some useful information to a separate answer - maybe it'll be useful to someone.

Logstash elasticsearch template matches only templates with "logstash-" prefix. That's why geoip.location field is double, not geo_point, when you use a different index name (like firewall*) without your custom template.

check this issue, if you need more information - https://github.com/elastic/logstash/issues/3137