[Question] ES field type

[matthgyver]

Hi,
I collect some data with Graylog. When an field contain IP is detected by Graylog, a new field is automaticaly created with only latitude and longitude coordinates.
This field is untyped.
I'm building dashboard (table, piechart ...) with ES data from my Graylog without problem but I can't build a map. I've no error but I've no circle on my map
I think is it because the field type is'nt geo_point type. Is it ?
Is it possible to build map with only latitude and longitude coordinates as string field ?
Thank you

[daniellee]

Support for Elasticsearch is built around geohashes or by matching a string - typically a country code or similar. Logstash can be configured to generate the geohashes from the coordinates and it should be possible to create a geo-point index with graylog too?

I suppose it should be possible to match them as strings but it would have some potential performance problems. Geohashes are a way to aggregate lots of data points into fewer series. For example, instead of having a time serie for every IP address, they would be aggregated by city. @christoph-buente said he got it to work without geohashes in this issue.

[matthgyver]

Thank you Daniellee

[daniellee]

Closing for now, I can reopen the issue if you're still stuck.