I would like to exclude an ip range in my kibana visualization via a search similar to "NOT dst_ip:10.0.0.0/8 ". the field is of type ip. Any help would be appreciated.

Kibana search query to remove ip range

magnusbaeck (Magnus Bäck) February 16, 2016, 7:16am 2

Surprisingly I can't find any documentation of this, but I think

NOT dst_ip:[10.0.0.0 TO 10.255.255.255]

works.

Topic		Replies	Views
Kibana filter ip address or network Kibana	2	12804	May 10, 2019
How do you exclude subnets from search results in Kibana? Elastic Search	5	317	December 18, 2024
How to hide data from being counted/visualized? Kibana	3	1491	July 6, 2017
How to filter on ip type fields in kibana Kibana	3	13838	May 6, 2019
Question About search in Kibana Kibana	2	308	November 26, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Kibana search query to remove ip range

Related topics