Hello I am trying to get geo_point working with Grafana geo maps, but having trouble in doing so.
In graylog I am pulling the data and converting it into a string using pipelines.
The values look correct in a format such as “-47,20”
However when querying elasticsearch on grafana the longitude and latitude values when using geo hash change and doesn’t populate the map at all.
Not sure if this is normal but I expected it to be a latitude and longitude coordinates.
My index file looks like this:
{
“order”: -1,
“index_patterns”: [
“pfsense_"
],
“settings”: {
“index”: {
“analysis”: {
“analyzer”: {
“analyzer_keyword”: {
“filter”: “lowercase”,
“tokenizer”: “keyword”
}
}
}
}
},
“mappings”: {
"source": {
“enabled”: true
},
“dynamic_templates”: [
{
“internal_fields”: {
“mapping”: {
“type”: “keyword”
},
“match_mapping_type”: “string”,
“match”: "gl2”
}
},
{
“store_generic”: {
“mapping”: {
“type”: “keyword”
},
“match_mapping_type”: “string”
}
}
],
“properties”: {
“gl2_accounted_message_size”: {
“type”: “long”
},
“gl2_receive_timestamp”: {
“format”: “uuuu-MM-dd HH:mm:ss.SSS”,
“type”: “date”
},
“streams”: {
“type”: “keyword”
},
“dest_ip_geolocation”: {
“copy_to”: “dst_location”,
“type”: “text”
},
“source”: {
“fielddata”: true,
“analyzer”: “analyzer_keyword”,
“type”: “text”
},
“message”: {
“fielddata”: false,
“analyzer”: “standard”,
“type”: “text”
},
“src_location”: {
“type”: “geo_point”
},
“gl2_processing_timestamp”: {
“format”: “uuuu-MM-dd HH:mm:ss.SSS”,
“type”: “date”
},
“dst_location”: {
“type”: “geo_point”
},
“full_message”: {
“fielddata”: false,
“analyzer”: “standard”,
“type”: “text”
},
“src_ip_geolocation”: {
“copy_to”: “src_location”,
“type”: “text”
},
“real_timestamp”: {
“format”: “uuuu-MM-dd HH:mm:ss”,
“type”: “date”
},
“timestamp”: {
“format”: “uuuu-MM-dd HH:mm:ss.SSS”,
“type”: “date”
}
}
},
“aliases”: {}
}
Could someone help me be able to populate my data into grafana maps please?
Thank You