Hello, The format of the IP addresses is incorrect from the ELK data source, am I missing something? If the format is in “string” it is displayed correctly, but when the format is in “IP” I have bad characters Can you help me to understand why ? Thank ! [Capture d’écran 2021-05-04 à 11.21.00…

The problem was a bad mapping on one of my index, when I use a alias thx

ELK Ip address format

fadjar340 May 4, 2021, 2:09pm 2

Try to change the field to source.ip.keyword or add keyword to the field name

Regards,
Fadjar

Topic		Replies	Views
Variable query doesn't work Elasticsearch templating	7	16401	April 6, 2022
Cannot Get Any Data From Elasticsearch Elasticsearch	1	804	September 28, 2018
Cannot add source b/c No date field named @timestamp found Elasticsearch	1	5760	December 10, 2018
No date field named timestamp found Elasticsearch	1	8108	September 6, 2018
Failed to parse query [host:()]", Elasticsearch	1	1726	August 1, 2018