[image] Hello, I am trying to search for documents containing an IP which falls under a range. As specified in the image the docs have IP 192.168.255.100 which falls under the mask: 192.168.0.0/24. But the result that I get is not as per my understanding. I was expecting to get docs in the bucket…

The error is coming from an index named indexing which you are searching because you are doing GET _search rather than GET /hostaddressindex/_search. The index indexing probably also has a field call ipAddress but that one is mapping to text. You need to search just the index you want the data from…

Discuss the Elastic Stack

Using bucket aggregation on IPs not giving expected results

Elastic Stack Elasticsearch

abdon (Abdon Pijpelink) September 14, 2017, 1:14pm 9

Can you please post the output of:

GET /hostaddressindex/_mapping

Topic		Replies	Views
Searching IP Address Range Using CIDR Mask Elasticsearch	4	4851	July 6, 2017
Is "ip_range" a real bucket aggregation? Elasticsearch	6	676	April 22, 2020
Match partial IP Elasticsearch	2	1667	July 5, 2017
How to convert ip long to string, to get ip subnets aggs Elasticsearch	8	2149	July 5, 2017
Finding ip address ranges that contain a given ip address Elasticsearch	3	1305	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Using bucket aggregation on IPs not giving expected results

Related topics