logstash 自定义生成 geoip/自定义的经纬度转换为 geo_point 类型
geo_point 的几种类型首先将经纬度的值赋给新的变量 geoip.location,然后将其转化为float类型,要注意的是【经度,纬度】,数组格式经度在前。
mutate {
add_field => ["[geoip][latitude]", "%{[lat]}"]
add_field => ["[geoip][longitude]", "%{[lon]}"]
add_field => ["[geoip][location]", "%{[lon]}"]
add_field => ["[geoip][location]", "%{[lat]}"]
}
mutate {
convert => ["[geoip][latitude]", "float"]
}
mutate {
convert => ["[geoip][longitude]", "float"]
}
mutate {
convert => ["[geoip][location]", "float"]
}