1. Logpoint Service Desk
  2. Community
  3. SIEM - Searching & Analytics

Search for IP Range

Avatar
Follow
1

Hi Everyone,

Was wondering if it's possible to search for an IP range among logs collected.
For example I might want to search for anything between 10.0.0.1 and 10.0.0.50 which would make investigations easier instead of searching for individual IP's.

Thanks in advance.

Share This Post:

1 comment

Date Votes
0
Avatar
Hans-Henrik Mørkholt

Hi

I think one way to handle this is doing subnetting using something like below search string.

source_address IN ["10.0.0.0/27","10.0.0.32/28";"10.0.0.48","10.0.0.49","10.0.0.50]"

Regards

Hans

Please sign in to leave a comment.