Search IP


(Salma Ait Lhaj) #1

I did this PUT in order to be able to search an interval of IP @ but it doesn't work !!


(Zachary Tong) #2

You'll need to specify the field that you wish to query. Without a specific field, the query will default to all fields which will give you strange results (e.g. the IP will be tokenized into a string for string fields, and may match random things).

See the query syntax here: https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-query-string-query.html#_ranges

E.g.

src_ip:[10.192.1.0 TO 10.192.1.9]

(Salma Ait Lhaj) #3

Thank you, it is working :blush:


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.