# Kibana 4 Visualization returning IP addresses in decimal format **URL:** \ **Category:** Kibana\ **Created:** [August 24, 2016, 8:18pm UTC](https://discuss.elastic.co/t/kibana-4-visualization-returning-ip-addresses-in-decimal-format/58862 "2016-08-24T20:18:34Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![datadude](https://avatars.discourse-cdn.com/v4/letter/d/58f4c7/32.png) [@datadude](https://discuss.elastic.co/u/datadude)\ **Post date:** [August 24, 2016, 8:18pm UTC](https://discuss.elastic.co/t/kibana-4-visualization-returning-ip-addresses-in-decimal-format/58862/1 "2016-08-24T20:18:34Z")
Setting up a visualization in kibana4 and found it is returning IP addresses in decimal format. Is there a way to get this to display in dotted-decimal (or normal IPv4) format? If relevant I am using a Data Table visualization. ---
**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\ **Post date:** [August 24, 2016, 11:51pm UTC](https://discuss.elastic.co/t/kibana-4-visualization-returning-ip-addresses-in-decimal-format/58862/2 "2016-08-24T23:51:30Z")
Hi Datadude, If you go to Settings and click on your index pattern, then look (or search) in the list of fields. What data type is your IP address field? I think it should be String, and not have the Analyzed check mark. If that's not the case, you might need to look at the mapping and how the data is being loaded. Is it logstash? Or a beat? Thanks, Lee ---
**Author:** ![datadude](https://avatars.discourse-cdn.com/v4/letter/d/58f4c7/32.png) [@datadude](https://discuss.elastic.co/u/datadude)\ **Post date:** [August 25, 2016, 12:03am UTC](https://discuss.elastic.co/t/kibana-4-visualization-returning-ip-addresses-in-decimal-format/58862/3 "2016-08-25T00:03:38Z")
String will likely work but what is the point of the IP type? ---
**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\ **Post date:** [August 25, 2016, 8:53pm UTC](https://discuss.elastic.co/t/kibana-4-visualization-returning-ip-addresses-in-decimal-format/58862/4 "2016-08-25T20:53:52Z")
Hi Datadude, It looks like when you use ip type you can do some greater than/less than tests against it that you probably can't do correctly when it's a string. So ip type is probably better. [https://www.elastic.co/guide/en/elasticsearch/reference/current/ip.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/ip.html) So when I try the example from the page above, I see I have `ip_addr` as type `ip` (indexed but not analyzed). ![](https://us1.discourse-cdn.com/elastic/original/2X/3/3891e6088c86823a0664115035efc7efc6d53b45.png) And in a Data Table visualization the ip address is shown in the dotted notation; ![](https://us1.discourse-cdn.com/elastic/original/2X/a/a41cde72927956b980f559cb4ca6922a50fdd2af.png) Maybe you're doing a different type of visualization? Can you attach a screenshot? Thanks, Lee ---
**Author:** ![datadude](https://avatars.discourse-cdn.com/v4/letter/d/58f4c7/32.png) [@datadude](https://discuss.elastic.co/u/datadude)\ **Post date:** [August 25, 2016, 11:42pm UTC](https://discuss.elastic.co/t/kibana-4-visualization-returning-ip-addresses-in-decimal-format/58862/5 "2016-08-25T23:42:50Z")
It is now working, I use ordered index templates and there was some conflict with that field between the order 0 template and the order 3 template. I guess kibana was using the order 0 template and not the 3 in the visualization. If you looked in kibana settings for the more specific index match the field was type ip, not analyzed but if you looked at the same field under the more generic index it was ip, analyzed I hit the refresh button at the top of the settings page and it fixed that field there to correspond with the order 3 template then went and checked the visualization and it was showing the IP address in dot form... ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:40pm UTC](https://discuss.elastic.co/t/kibana-4-visualization-returning-ip-addresses-in-decimal-format/58862/6 "2017-07-06T13:40:16Z")