Long IP to String convertion in Kibana

Elastic Stack Kibana
1

Hi Team,

Currently we have stored in IP's are (IPV4)Long Values .we have handled Billion of events for a day(Saving disk space and performance we have used IP as Long). While we are using kibana in Discover or DashBoard module.

For Example If my ip in the long value 154452126 ,i have to show their equivalent string "9.52.192.158" like this .

Is this posible when i am using kibana.

2

You should be able to do this with a scripted field (Management > Index Patterns > ? > Scripted fields), as I have seen folks go the other direction before. I am not sure what the performance implications of this would be at query time.

Out of curiosity, how much savings were you seeing by storing it as a long? ES stores it as a long under the hood, but will add overhead for the index to aid in searching.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.