Hi,
When using ip type field in group by in SQL search, the following error occurs.
“failed to load column with type DOUBLE”
Query
POST /_opendistro/_sql
{
“query”: “select src_ip from network_traffic where src_ip=‘192.168.0.201/32’ group by src_ip order by src_ip”
}
Result
{
“schema”: [{
“name”: “src_ip”,
“type”: “double”
}],
“total”: 1,
“datarows”: [[“192.168.0.201”]],
“size”: 1,
“status”: 200
}
Field Mapping
“src_ip” : {
“type” : “ip”
},