I have configured index template with a set of field as ip, geo_point and integers but when the data is indexed its getting stored as text and not as ip or number or geo_point.
I have been using these for many years never had this but for one specific index i am facing this issue.
Logs are collected using sysinput filter in logstash
filters i am using are geo_ip, grok and mutate.
What can be the possible reason.