I am running Graylog 7.0.6 + Opensearch 2.19.5 + MongoDB 7.0.31 on Ubuntu 22.04.5 LTS. I have defined a field as a Number (Floating Point) in the “configure index field types” section, and have rotated the index. I am searching events only for dates/times after that configuration and index rotation, and am attempting to sort the values of that field, but they appear to be treated as strings, rather than floating point values.
Great question and I’m not sure, I could force a float or long by altering the type of a field from within the UI buy double is not accounted for. What is interesting is that if you have applied a mapping as type float, how are you now getting a double?
At the least there could be a compound type issue where index to index the type of a given field changes which can lead to issues when aggregating.