My index Template is not working

General Feedback
1

I have configured index template with a set of field as ip, geo_point and integers but when the data is indexed its getting stored as text and not as ip or number or geo_point.

I have been using these for many years never had this but for one specific index i am facing this issue.

Logs are collected using sysinput filter in logstash

filters i am using are geo_ip, grok and mutate.

What can be the possible reason.

2

hey gokul,

I’m going to move this to the general category since I don’t think it has anything to do with the specific index management feature in OpenSearch.

Also, could you provide an isolated case so we might be able to help more effectively?