Difference between logstash .conf file and elastic template file

Thanks @Christian_Dahlqvist for the reply.

Those fields are the main reason why I asked this question continuing from this one. So what are the pros and cons of not mapping ip's as type 'ip' and instead leaving them as strings? Which one should we prefer? (The same with geo_ip as well?) Thanks :slight_smile: in advance.