Correct src_ip field datatype to 'ip'

[CamTheMan (Cam)]

I actually had to fix some things regarding 'host.keyword' disappearing and not 'aggreagatable' which i had to fix with an another template update, documented here:

Changing the analyzer type fields are no longer aggregatable

Hi All, I changed the index mapping for my index, and now I can't perform visualisations on the fields! Example index template: PUT /_template/my_logstash { "order": 1000, "index_patterns": [ "logstash-*", "docker-*", "syslog-*", "ironport-*", "radius-*", "firewall-*" ], "settings": { "analysis": { "analyzer": { "keyword_lowercase": { "tokenizer": "keyword", "filter": ["lowercase"] }, "whitespace_lowercase": { "tokenizer": "whitespace", "filter…