Hey all — I’m trying to answer this prompt: “Write a regular expression to match on any IP address. How many DNS answers contain an IP address?” It is my last question on “3.2 - Discover - Searching with KQL and Lucene” and i have been stuck at it for a good amount of time any help appreciated Than…

Hello @Mayad_Koujah Welcome to the Community!! Training : Elastic Security for SIEM 3.2 - Discover - Searching with KQL and Lucene: Write a regular expression to match on any IP address. How many dns answers contain an IP address? Since it is a regular expression we need to use Lucene. index :…

Discuss the Elastic Stack

Write a regular expression to match on any IP address. How many dns answers contain an IP address?

Elastic Community and Ecosystem Elastic Training

Tortoise August 23, 2025, 3:24am 4

Sure @Mayad_Koujah , I have shared the explanation.

Topic		Replies	Views
Kibana: howto query for IPaddr:Port in String with regex/wildcard Elasticsearch	2	1433	July 6, 2017
Query a specific IP address in Elastic Elasticsearch	3	1653	April 19, 2022
Logstash filter to match IP's Logstash	4	7178	July 6, 2017
Filter not working Logstash	2	534	July 6, 2017
Highlighting IP-Adresses without searching for them Elasticsearch	3	431	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Write a regular expression to match on any IP address. How many dns answers contain an IP address?

Related topics