# Kibana filter ip address or network

**URL:** https://discuss.elastic.co/t/kibana-filter-ip-address-or-network/176549
**Category:** Kibana
**Created:** [April 12, 2019, 7:08am UTC](https://discuss.elastic.co/t/kibana-filter-ip-address-or-network/176549 "2019-04-12T07:08:37Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![taku](https://avatars.discourse-cdn.com/v4/letter/t/d07c76/32.png) [@taku](https://discuss.elastic.co/u/taku)
#### Post date: [April 12, 2019, 7:08am UTC](https://discuss.elastic.co/t/kibana-filter-ip-address-or-network/176549/1 "2019-04-12T07:08:37Z")

</div>

Hello all, tell me plz how to do a search in kibana filter on site [demo.elastic.co](http://demo.elastic.co) across the subnet  
this query don't show any address in 10.12.1.0/24  
where I was wrong in the request  
{  
"query": {  
"match": {  
"apache2.access.remote\_ip": {  
"query": "10.12.1.0/24",  
"type": "phrase"  
}  
}  
}  
}  
"query": "10.12.1.\*" don't work

---

<div class="post-metadata">

### Author: ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)
#### Post date: [April 12, 2019, 1:05pm UTC](https://discuss.elastic.co/t/kibana-filter-ip-address-or-network/176549/2 "2019-04-12T13:05:24Z")

</div>

for IP ranges you should do the "is between" type of filter:  
it will end up looking something like this in query DSL:

```auto
{
  "range": {
    "ip": {
      "gte": "64.251.200.0",
      "lt": "64.251.200.255"
    }
  }
}

```

But i recommend just using the filter builder where you can select fields, ranges and everything you need for a filter.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 10, 2019, 1:05pm UTC](https://discuss.elastic.co/t/kibana-filter-ip-address-or-network/176549/3 "2019-05-10T13:05:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
