Geo Coordinates Field

[oneCrazyAdmin]

I have been an ELK stack user for a long time. I love the coordinate map so I can see where traffic is coming from.

I see that the SO stack is doing the geo coordinates, but are not placing them in a geo_point field type as shown here

I am not seeing it specified in the various index templates. Is this something that would be beneficial across the community?

[weslambert]

We used to do this, but it looks like the template has not been updated for the new field naming convention. I've put in an issue to add this back.

#3152

[oneCrazyAdmin]

Thank you! I am a very visual person and there is something soothing about seeing where your attackers are coming from...

[DebianGuru]

Any update on this? I love the maps, in Kibana, but they require this format. If it's not in the immediate plans to add back to SO, how hard would it be to generate those key pairs? I'm guessing something in Logstash? I'm a real novice there and have no desire to break my box.

[oneCrazyAdmin]

It looks like they are going to add it into 2.3.60. If they stay on their release schedule, should be in under a month.

[DebianGuru]

That's awesome! These guys have it together. The big companies sure could learn a lesson from them. Ask Google or Microsoft for something and it may take years or never to be done (even things that should be simple).