Mutate is not working

[saad]

Hi,

I am trying to work on mutate to convert some the source and destination IP addresses from string to ip. However, it is not working

below are the results
logstash.conf
input
{
stdin
{
type=>"soc"
}
}

filter
{
csv {columns => ["eventId","eventCode","srcAddr","dstAddr"] separator => ","}
mutate{
convert => { "srcAddr" => "ip"}
}
}
output
{
stdout{ codec => rubydebug}
}

the logstash didnt work successfully. is there something wrong

[magnusbaeck (Magnus Bäck)]

If you look in the documentation of the mutate filter, is "ip" a valid data type to convert to?

The IP address data type exists only on the Elasticsearch side.

[saad]

Thank you