To import geospatical data into the Elastic Stack, the data must be indexed as geo_point or geo_shape. Geospatial data comes in many formats. Choose an import tool based on the format of your geospatial data.
When you upload GeoJSON or delimited files in Kibana, there is a file size limit, which is configurable in Advanced Settings.
The Elastic Stack security features provide roles and privileges that control which users can upload files. You can manage your roles, privileges, and spaces in Stack Management in Kibana. For more information, see Security privileges, Kibana privileges, and Kibana role management.
To upload GeoJSON files in Kibana with Maps, you must have:
allKibana privilege for Maps
allKibana privilege for Index Pattern Management
create_indexindex privileges for destination indices
To use the index in Maps, you must also have the
view_index_metadataindex privileges for destination indices
To upload delimited files (such as CSV, TSV, or JSON files) on the Kibana home page, you must also have:
allKibana privilege for Discover
manageindex privilege for destination indices
Upload delimited files with latitude and longitude columnsedit
On the Kibana home page, you can upload a file and import it into an Elasticsearch index with latitude and longitude columns combined into a
- Go to the Kibana home page and click Upload a file.
- Select a file in one of the supported file formats.
- Click Import.
- Select the Advanced tab.
- Set Index name.
If a combined
geo_pointfield is not created automatically, click Add combined field, then click Add geo point field.
- Fill out the form and click Add.
- Click Import.
Upload a GeoJSON fileedit
Upload GeoJSON indexes GeoJSON features as a
- Create a new map.
- Click Add layer.
- Select Upload GeoJSON.
- Use the file chooser to select a GeoJSON file.
- Click Import file.
Upload data with IP addressesedit
The GeoIP processor adds information about the geographical location of IP addresses. See GeoIP processor for details. For private IP addresses, see Enriching data with GeoIPs from internal, private IP addresses.
Upload data with GDALedit
GDAL (Geospatial Data Abstraction Library) contains command line tools that can convert geospatial data between 75 different geospatial file formats and index that geospatial data into Elasticsearch. See Ingest geospatial data into Elasticsearch with GDAL for details.