I’ve seen this question asked on Stackoverflow years ago but it never received any valid answers and I am having a lot of trouble with this.
The geoip processor in Data Prepper places the latitude and longitude coordinates separately when they are ingested which makes them unuseable for OpenSearch maps. I am not sure how to combine the data into one location field.
On top of this, the data is not in the geo_point format and when I try to use an index template to change the data type to geo_point it just completely disappears from my logs. It’s like all the exits are sealed off and I don’t know how to overcome this issue. Any help is appreciated.