Hi,
i need to Convert a field (client_ip) from string to IP type.
I use ILM for the index.
It would be possible to change the field type on the next rollover? It doesn't matter that the previous indices are compromised.
Hello @yago82
Are you using an index template? If so, you can update it and the new type will be reflected in new indices.
If you have further questions please mention the version of the stack you're running.
Thanks,
Matt
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.