In the default templates, specify geoip.postal_code to be type 'keyword', to avoid incorrectly autodetecting as type 'date'.

smokris · smokris · commit cce3abe6948f · 2018-07-04T20:39:18.000-04:00
diff --git a/lib/logstash/outputs/elasticsearch/elasticsearch-template-es2x.json b/lib/logstash/outputs/elasticsearch/elasticsearch-template-es2x.json
@@ -86,7 +86,8 @@
             "ip": { "type": "ip", "doc_values" : true },
             "location" : { "type" : "geo_point", "doc_values" : true },
             "latitude" : { "type" : "float", "doc_values" : true },
-            "longitude" : { "type" : "float", "doc_values" : true }
+            "longitude" : { "type" : "float", "doc_values" : true },
+            "postal_code" : { "type" : "string", "not_analyzed" : true }
           }
         }
       }
diff --git a/lib/logstash/outputs/elasticsearch/elasticsearch-template-es5x.json b/lib/logstash/outputs/elasticsearch/elasticsearch-template-es5x.json
@@ -37,7 +37,8 @@
             "ip": { "type": "ip" },
             "location" : { "type" : "geo_point" },
             "latitude" : { "type" : "half_float" },
-            "longitude" : { "type" : "half_float" }
+            "longitude" : { "type" : "half_float" },
+            "postal_code" : { "type" : "keyword" }
           }
         }
       }
diff --git a/lib/logstash/outputs/elasticsearch/elasticsearch-template-es6x.json b/lib/logstash/outputs/elasticsearch/elasticsearch-template-es6x.json
@@ -36,7 +36,8 @@
             "ip": { "type": "ip" },
             "location" : { "type" : "geo_point" },
             "latitude" : { "type" : "half_float" },
-            "longitude" : { "type" : "half_float" }
+            "longitude" : { "type" : "half_float" },
+            "postal_code" : { "type" : "keyword" }
           }
         }
       }
diff --git a/lib/logstash/outputs/elasticsearch/elasticsearch-template-es7x.json b/lib/logstash/outputs/elasticsearch/elasticsearch-template-es7x.json
@@ -37,7 +37,8 @@
             "ip": { "type": "ip" },
             "location" : { "type" : "geo_point" },
             "latitude" : { "type" : "half_float" },
-            "longitude" : { "type" : "half_float" }
+            "longitude" : { "type" : "half_float" },
+            "postal_code" : { "type" : "keyword" }
           }
         }
       }

Original file line number	Diff line number	Diff line change
`@@ -86,7 +86,8 @@`
`86`	`86`	`"ip": { "type": "ip", "doc_values" : true },`
`87`	`87`	`"location" : { "type" : "geo_point", "doc_values" : true },`
`88`	`88`	`"latitude" : { "type" : "float", "doc_values" : true },`
`89`		`- "longitude" : { "type" : "float", "doc_values" : true }`
	`89`	`+ "longitude" : { "type" : "float", "doc_values" : true },`
	`90`	`+ "postal_code" : { "type" : "string", "not_analyzed" : true }`
`90`	`91`	`}`
`91`	`92`	`}`
`92`	`93`	`}`
Original file line number	Diff line number	Diff line change
`@@ -37,7 +37,8 @@`
`37`	`37`	`"ip": { "type": "ip" },`
`38`	`38`	`"location" : { "type" : "geo_point" },`
`39`	`39`	`"latitude" : { "type" : "half_float" },`
`40`		`- "longitude" : { "type" : "half_float" }`
	`40`	`+ "longitude" : { "type" : "half_float" },`
	`41`	`+ "postal_code" : { "type" : "keyword" }`
`41`	`42`	`}`
`42`	`43`	`}`
`43`	`44`	`}`
Original file line number	Diff line number	Diff line change
`@@ -36,7 +36,8 @@`
`36`	`36`	`"ip": { "type": "ip" },`
`37`	`37`	`"location" : { "type" : "geo_point" },`
`38`	`38`	`"latitude" : { "type" : "half_float" },`
`39`		`- "longitude" : { "type" : "half_float" }`
	`39`	`+ "longitude" : { "type" : "half_float" },`
	`40`	`+ "postal_code" : { "type" : "keyword" }`
`40`	`41`	`}`
`41`	`42`	`}`
`42`	`43`	`}`