https://community.splunk.com/t5/Deployment-Architecture/Blacklist-IP-Ranges-in-serverclass-conf/m-p/51509#M1667 <P>No, ranges or CIDR defined blocks are not supported in the blacklists/whitelists. However the patterns are really PCRE regular expressions, so there's the option of using that, for instance like this (using your example scenario):</P> <PRE><CODE>[serverClass:test-type] machineTypes=windows-intel, linux-i686, linux-x86_64 filterType=whitelist whitelist.0=* blacklist.0=192.168.1.1[34][0-9] </CODE></PRE> Wed, 03 Aug 2011 07:50:03 GMT Ayn 2011-08-03T07:50:03Z https://community.splunk.com/t5/Deployment-Architecture/Blacklist-IP-Ranges-in-serverclass-conf/m-p/51508#M1666 <P>Is it possible to blacklist ip ranges in serverclass.conf? Something like this?</P> <P>[serverClass:test-type]<BR /> machineTypes=windows-intel, linux-i686, linux-x86_64<BR /> filterType=whitelist<BR /> whitelist.0=*<BR /> blacklist.0=192.168.1.130-192.168.1.149</P> <P>Thanks!</P> Mon, 01 Aug 2011 19:28:04 GMT https://community.splunk.com/t5/Deployment-Architecture/Blacklist-IP-Ranges-in-serverclass-conf/m-p/51508#M1666 trross33 2011-08-01T19:28:04Z https://community.splunk.com/t5/Deployment-Architecture/Blacklist-IP-Ranges-in-serverclass-conf/m-p/51509#M1667 <P>No, ranges or CIDR defined blocks are not supported in the blacklists/whitelists. However the patterns are really PCRE regular expressions, so there's the option of using that, for instance like this (using your example scenario):</P> <PRE><CODE>[serverClass:test-type] machineTypes=windows-intel, linux-i686, linux-x86_64 filterType=whitelist whitelist.0=* blacklist.0=192.168.1.1[34][0-9] </CODE></PRE> Wed, 03 Aug 2011 07:50:03 GMT https://community.splunk.com/t5/Deployment-Architecture/Blacklist-IP-Ranges-in-serverclass-conf/m-p/51509#M1667 Ayn 2011-08-03T07:50:03Z