What do you mean exactly?
These are the fields I'm able to obtain, whereas geoip.coordinates is built
by using
add_field => [ "[geoip][coordinates]", "%{[geoip][longitude]}" ]
add_field => [ "[geoip][coordinates]", "%{[geoip][latitude]}" ]
in my logstash.conf.
geoip.city_name Warsaw*t*geoip.continent_code EU*#*geoip.coordinates
["21.0","52.25"]*t*geoip.country_code2 PL*t*geoip.country_code3 POL*t*
geoip.country_name Poland*t*geoip.ip 217.67.205.50*#*geoip.latitude 52.25*#*
geoip.location [21,52.25]*#*geoip.longitude 21*t*geoip.real_region_name
Mazowieckie*t*geoip.region_name 78*t*geoip.timezone Europe/Warsaw
Can please be so kind and post the part of your geoip filter in your
logstash.conf where handle the building of fields in order to use in tile
map of kb4?
Thanks in advance
Am Samstag, 7. März 2015 16:40:07 UTC+1 schrieb Mark Walkom:
>
> ES needs a single lat+lon field to read. It or KB won't combine things
>
--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/633b740d-1f9d-43ed-acdd-670e30829503%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
