"mappings": {
"properties": {
"client.ip":{"type": "ip"},
"host.ip":{"type": "ip"},
"server.ip":{"type": "ip"},
"source.ip":{"type": "ip"},
"destination.ip":{"type": "ip"},
"geoip":
{
"dynamic": true,
"properties": {
"ip":{"type":"ip"},
"latitude":{"type":"half_float"},
"longitude":{"type":"half_float"},
"location":{"type":"geo_point"}
}
}
This was the first mapping i created and the result i got successfull that is geo.ip type was ip and geo.latitude type was half float.
After that i want to add some fields so i update my mapping
"mappings": {
"properties": {
"client.ip":{"type": "ip"},
"host.ip":{"type": "ip"},
"server.ip":{"type": "ip"},
"source.ip":{"type": "ip"},
"destination.ip":{"type": "ip"},
"geoip":
{
"dynamic": true,
"properties": {
"ip":{"type":"ip"},
"latitude":{"type":"half_float"},
"longitude":{"type":"half_float"},
"location":{"type":"geo_point"}
}
},
"destination.geo":
{
"dynamic":false,
"properties": {
"ip":{"type":"ip"},
"latitude":{"type":"half_float"},
"longitude":{"type":"half_float"},
"location":{"type":"geo_point"}
}
}
when i run this query("acknowledged" : true) and refresh my index pattern there is no change in its type earlier destination.geo.ip type was string after updating it type was same i m not talking about only one field.