Change geoip.location type to geopoint

[rkoster]

This way the Tile Map visualisation should work

[rkoster]

I was able to get it to work with the following index template:

curl -XPUT http://localhost:9200/_template/logstash -d '
{
    "template": "logstash-*",
    "order": 10,
    "settings": {
        "number_of_shards": 4,
        "number_of_replicas": 1,
        "index": {
            "query": {
                "default_field": "@message"
            },
            "store": {
                "compress": {
                    "stored": true,
                    "tv": true
                }
            }
        }
    },
    "mappings": {
        "_default_": {
            "_all": {
                "enabled": false
            },
            "_source": {
                "compress": true
            },
            "_ttl": {
                "enabled": true,
                "default": "2592000000"
            },
            "dynamic_templates": [
                {
                    "string_template": {
                        "match": "*",
                        "mapping": {
                            "type": "string",
                            "index": "not_analyzed"
                        },
                        "match_mapping_type": "string"
                    }
                }
            ],
            "properties": {
                "@message": {
                    "type": "string",
                    "index": "analyzed"
                },
                "@tags": {
                    "type": "string",
                    "index": "not_analyzed"
                },
                "@timestamp": {
                    "type": "date",
                    "index": "not_analyzed"
                },
                "@type": {
                    "type": "string",
                    "index": "not_analyzed"
                },
                "message": {
                    "type": "string",
                    "index": "analyzed"
                },
                "message_data": {
                    "type": "object",
                    "properties": {
                        "Message": {
                            "type": "string",
                            "index": "analyzed"
                        }
                    }
                },
                "geoip": {
                    "properties": {
                        "location": {
                            "type": "geo_point"
                        }
                    }
                }
            }
        }
    }
}
'

Which is basically the same as this template with the addition of:

{
    "mappings": {
        "_default_": {
            "properties": {
                "geoip": {
                    "properties": {
                        "location": {
                            "type": "geo_point"
                        }
                    }
                }
           }
     }
}

[hannayurkevich]

Fixed in #147.