Hello, I have only recently discovered the field datatype 'ip' I have most of the my IP addresses labeled as 'src_ip' looking at the current data type it's a 'string'. Can i force the change somehow? How do i fix it? Deep down I realise the answer will be re-index the data. Unfortunately I can't…

Correct src_ip field datatype to 'ip'

CamTheMan (Cam) November 19, 2018, 2:29am 8

I actually had to fix some things regarding 'host.keyword' disappearing and not 'aggreagatable' which i had to fix with an another template update, documented here:

Topic		Replies	Views
Logstash ip data type Logstash	2	1009	May 12, 2020
Convert a field from string to ip type Logstash	5	19891	July 6, 2017
Error converting field type in a reindexing Elasticsearch ingest-pipeline , reindex	2	555	May 17, 2022
Can't convert the string datatype to ip Logstash	3	2756	February 9, 2018
Change field type from string to integer? and how to re-index? Elasticsearch	15	58463	July 5, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Correct src_ip field datatype to 'ip'

Related Topics