How to create a new field named 'Geolocation_dstIP.local' as a geo_point?

[ocerna]

Hello,

I'm working on a point-to-point map visualization. I have Elasticsearch 7.17.13 and Wazuh 4.5.4 installed.

I see that there are only two fields to select with type geo_point: 'GeoLocation.location' and another one related to AWS.

Reviewing the pipeline configuration, 'Geolocation' reads data from the 'srcip' field.

I'd like to create a new one called 'Geolocation_dstip' that reads data from 'dstip,' and 'Geolocation_dstIP.location' remains of type geo_point.

Could you help me?