CODEWITHSUNDEEP
restelasticsearch
張皓翔
張皓翔

Reputation: 361

How to Map IP type

this is my IPV4_DST_ADDR field mapping:

"IPV4_DST_ADDR":{"type":"text","norms":false,"fields":{"keyword":{"type":"keyword","ignore_above":256}}}

I want to change the type from text to IP, how can I do?

thank you in advance!

Upvotes: 0

Views: 75

Answers (1)

abhishek627
abhishek627

Reputation: 148

You need to read about index templates. Since, your indices follow some pattern, you can define your index_patterns like ntopng-* in your template file. Now, all your indices having this pattern will have this ip mapping on indexing.

For more info, https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-templates.html

Upvotes: 1

Related Questions