Skip to content

Region map visualizations fail because they query the legacy utm-geoip index #2131

@AlexSanchez-bit

Description

@AlexSanchez-bit

Acknowledgements

Describe the bug

Coordinate / region map chart visualizations still query a legacy
utm-geoip index that is no longer populated or shipped. The lookup fails
silently or with index_not_found_exception, so any dashboard widget that
plots events on a geographic map renders empty or errors out.

Regression Issue

  • Select this option if this issue appears to be a regression.

Expected Behavior

Region / coordinate map charts should derive latitude and longitude directly
from native event fields (geo_point-typed fields on the alert / event
document) and stop referencing the dead utm-geoip index entirely.

Current Behavior

Region map widgets render with no data; backend logs show repeated
index_not_found_exception or empty result sets for the utm-geoip
lookup.

Reproduction Steps

  1. Open a dashboard that contains a region map / coordinate map
    visualization (or create one).
  2. Configure it to plot events by geographic location.
  3. Observe an empty map and / or OpenSearch index-not-found errors in the
    backend logs.

Possible Solution

No response

Additional Information/Context

No response

UTMStack Version

11.2.8

Operating System and version

Hypervisor and Version | Server Vendor and Model

Browser and version

Metadata

Metadata

Labels

No labels
No labels

Type

No fields configured for Bug.

Projects

Status
👀 In review

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions