Geo Fields
editGeo Fields
editGeo fields can carry data about a specific location related to an event.
This geolocation information can be derived from techniques such as Geo IP, or be user-supplied.
Geo Field Details
editField | Description | Level |
---|---|---|
geo.city_name |
City name. type: keyword example: |
core |
geo.continent_name |
Name of the continent. type: keyword example: |
core |
geo.country_iso_code |
Country ISO code. type: keyword example: |
core |
geo.country_name |
Country name. type: keyword example: |
core |
geo.location |
Longitude and latitude. type: geo_point example: |
core |
geo.name |
User-defined description of a location, at the level of granularity they care about. Could be the name of their data centers, the floor number, if this describes a local physical entity, city names. Not typically used in automated geolocation. type: keyword example: |
extended |
geo.region_iso_code |
Region ISO code. type: keyword example: |
core |
geo.region_name |
Region name. type: keyword example: |
core |
Field Reuse
editThe geo
fields are expected to be nested at: client.geo
, destination.geo
, host.geo
, observer.geo
, server.geo
, source.geo
.
Note also that the geo
fields are not expected to be used directly at the top level.