Coordinate Mapedit

Using a coordinate map, you can visualize geographic information in the log file sample data.

  1. Create a Coordinate map and set the search source to logstash*.
  2. In the top menu bar, click the time picker on the far right.
  3. Click Absolute.
  4. Set the start time to May 18, 2015 and the end time to May 20, 2015.
  5. Click Go.

You haven’t defined any buckets yet, so the visualization is a map of the world.

images/tutorial-visualize-map-1.png

Now map the geo coordinates from the log files.

  1. In the Buckets pane, click Geo Coordinates.
  2. Set Aggregation to Geohash and Field to geo.coordinates.
  3. Click Apply changes images/apply-changes-button.png.

The map now looks like this:

images/tutorial-visualize-map-2.png

You can navigate the map by clicking and dragging. The controls on the top left of the map enable you to zoom the map and set filters. Give them a try.

images/tutorial-visualize-map-3.png

Save this map with the name Map Example.