Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
Describe the issue:
Configuration:
Relevant Logs or Screenshots:
What’s the field type of data.srcip? Could you show the index mapping? That field maybe mapped as text type, it should be keyword type instead I think.