ELK Ip address format

Hello,

The format of the IP addresses is incorrect from the ELK data source, am I missing something?

If the format is in “string” it is displayed correctly, but when the format is in “IP” I have bad characters

Can you help me to understand why ?

Thank !

Try to change the field to source.ip.keyword or add keyword to the field name

Regards,
Fadjar

The problem was a bad mapping on one of my index, when I use a alias

thx

1 Like