How to filter on ip type fields in kibana

Elastic Stack Kibana
1

Hi,
I would like to get all documents with an ip that begin with 192.168. but I don't find how to do it. If I put in kibana search clientip:192.168.1.1 it works. But if put clientip:192.168.* it failed.

Someone can help me ?

1 Like
2

Use CIDR masks to filter IP addresses by range

For your example, the filter will be clientip:192.168.0.0/16

1 Like
3

Thank you ! It works but i had to put the CIDR mask inside double quotes clientip:"192.168.0.0/16"

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.