Why source.ip.keyword instead source.ip after upgrade

Hi everyone!
I upgrade my installation of elastic from 7.6 to 7.6.1 and break my dashboards.
In my visualizations I used split by Terms=source.ip and now I have error that field not exist.
Now I can select source.ip.keywords only.
What this mean?

It sounds like a change in mapping of your fields. How did you do your upgrade and did you do any other change with the upgrade (reindex, snapshot restore, etc) ?

Sorry for delay. It's my issue. I had upgrade filebeat before upgrade template mapping in elasticsearch.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.