# Mapping conflict with host.ip in filebeat

**URL:** <https://discuss.elastic.co/t/mapping-conflict-with-host-ip-in-filebeat/305502>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [May 24, 2022, 12:19pm UTC](https://discuss.elastic.co/t/mapping-conflict-with-host-ip-in-filebeat/305502 "2022-05-24T12:19:11Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![PJ\_ceSofnI\_tseT](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pj_cesofni_tset/32/82564_2.png) [@PJ\_ceSofnI\_tseT](https://discuss.elastic.co/u/PJ_ceSofnI_tseT)\
**Post date:** [May 24, 2022, 12:19pm UTC](https://discuss.elastic.co/t/mapping-conflict-with-host-ip-in-filebeat/305502/1 "2022-05-24T12:19:11Z")

</div>

Hi all,

I am using filebeat on different hosts but on one of them a conflict has appeared for the host.ip field.

 ![filebeat-conflict](https://us1.discourse-cdn.com/elastic/original/3X/9/6/960b0c4314240102b728d564eb6d4acff3ae59d9.png)

This field appears to have the types: ip and text. This happens because both the IPv4 and IPv6 versions appear ( **10.x.x.x and fe80:::xx:xx...:xx** )

I know that this would be solved by reindexing, but what format should I give this field to be able to use it correctly and take into account both possible values? My idea would be to use the Security rules and if this conflict exists it would not be possible... what would be the best way to solve it?

Apparently this has also happened in the next post, but it was fixed by removing the IPv6 version of the host, which I can't do...

> [@Need help with filebeat index pattern - Mapping conflict with host.ip](https://discuss.elastic.co/t/need-help-with-filebeat-index-pattern-mapping-conflict-with-host-ip/279673):
>
> filebeat index pattern shows warning that host.ip is showing both type ip and text. I believe this is somehow related to IPv6 host.ip is in type text and IPv4 host.ip in type ip how do fix this ? at this point I don't need IPv6 detail(s).

It also want to ask this problem in a generic way... if any other field has a conflict between the field value (ip, date, long or others...) and the type text. How could I solve it so that it would allow me to apply filters, rules, views of the Security feature?

Thanks  
Regards

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 21, 2022, 2:19pm UTC](https://discuss.elastic.co/t/mapping-conflict-with-host-ip-in-filebeat/305502/2 "2022-06-21T14:19:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.