I know there is the ability in Kibana to search by an IP range ex: ip:["128.0.0.0" TO "191.255.255.255"] and there is also the ability to use CIDR masks when creating a new aggregation (Visualization tab). My question is can you somehow use CIDR masks from the Discovery view? ex: ip:"128.0.0/2" …

Use CIDR masks from Discover tab?

warkolm (Mark Walkom) December 23, 2015, 11:12pm 6

Turns out you can do this using this query - {"term" : {"ip" : "192.168.0.0/24"}} (NOTE: applies to ES 2.2 only sorry!).

Thanks to @lukas for digging it up

Topic		Replies	Views
Searching IP Address Range Using CIDR Mask Elasticsearch	4	4869	July 6, 2017
PAcketbeat Flow wih CIDR search on Kibana Kibana	19	2127	June 5, 2018
Ip range with subnet Elasticsearch	4	2842	July 6, 2017
CIDR query on ip range [2nd try] Elasticsearch	1	628	August 22, 2018
How do you exclude subnets from search results in Kibana? Elastic Search	5	317	December 18, 2024