ELK Ip address format


The format of the IP addresses is incorrect from the ELK data source, am I missing something?

If the format is in “string” it is displayed correctly, but when the format is in “IP” I have bad characters

Can you help me to understand why ?

Thank !

Try to change the field to source.ip.keyword or add keyword to the field name


The problem was a bad mapping on one of my index, when I use a alias


1 Like