# Source.ip.keyword insted of source.ip

**URL:** <https://discuss.elastic.co/t/source-ip-keyword-insted-of-source-ip/251803>\
**Category:** Kibana\
**Created:** [October 12, 2020, 7:06pm UTC](https://discuss.elastic.co/t/source-ip-keyword-insted-of-source-ip/251803 "2020-10-12T19:06:34Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![markov00](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/markov00/32/33316_2.png) [@markov00](https://discuss.elastic.co/u/markov00)\
**Post date:** [October 14, 2020, 9:18am UTC](https://discuss.elastic.co/t/source-ip-keyword-insted-of-source-ip/251803/2 "2020-10-14T09:18:16Z")

</div>

Hi @Adriann  
seems like that field is not mapped as ip, but was mapped as text and by default also as keyword, could you please check the mappings of the `source.ip` and compare it to the one from the `destination.ip`?

```auto
GET your_index_name/_mapping/field/source.ip
GET your_index_name/_mapping/field/destination.ip

```

---

_[View the full topic](https://discuss.elastic.co/t/source-ip-keyword-insted-of-source-ip/251803)._