Kibana search query to remove ip range

I would like to exclude an ip range in my kibana visualization via a search similar to "NOT dst_ip: ". the field is of type ip. Any help would be appreciated.

Surprisingly I can't find any documentation of this, but I think

NOT dst_ip:[ TO]


Thanks @magnusbaeck, I also have also tried the following and it seems to work as well.

NOT dst_ip: OR NOT dst_ip:

1 Like