Kibana search query to remove ip range

(jay) #1

I would like to exclude an ip range in my kibana visualization via a search similar to "NOT dst_ip: ". the field is of type ip. Any help would be appreciated.

(Magnus B├Ąck) #2

Surprisingly I can't find any documentation of this, but I think

NOT dst_ip:[ TO]


(jay) #3

Thanks @magnusbaeck, I also have also tried the following and it seems to work as well.

NOT dst_ip: OR NOT dst_ip:

(system) #4