topic How to filter out event in Splunk -IP address search via CIDR in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-filter-out-event-in-Splunk-IP-address-search-via-CIDR/m-p/593483#M206561 <P>Hey Team, I have some 150+ ip addresses in CIDR format (IE 96.24.0.0/16, etc) , i am getting my search result with one values coming as&nbsp; dst_ip 96.24.123.123.&nbsp;</P> <P>i need to filter out this event. so basically if it would be one,, i can simply do in my SPL dst_ip!= (96.24.0.0/16) or NOT dst_ip IN ((96.24.0.0/16),&nbsp;</P> <P>but i have around 150+ cidr that i need to filter out. i tried to add them into lookup file and it seems cidr in lookfile is not working. can someo</P> Tue, 12 Apr 2022 17:20:16 GMT saurav47 2022-04-12T17:20:16Z How to filter out event in Splunk -IP address search via CIDR https://community.splunk.com/t5/Splunk-Search/How-to-filter-out-event-in-Splunk-IP-address-search-via-CIDR/m-p/593483#M206561 <P>Hey Team, I have some 150+ ip addresses in CIDR format (IE 96.24.0.0/16, etc) , i am getting my search result with one values coming as&nbsp; dst_ip 96.24.123.123.&nbsp;</P> <P>i need to filter out this event. so basically if it would be one,, i can simply do in my SPL dst_ip!= (96.24.0.0/16) or NOT dst_ip IN ((96.24.0.0/16),&nbsp;</P> <P>but i have around 150+ cidr that i need to filter out. i tried to add them into lookup file and it seems cidr in lookfile is not working. can someo</P> Tue, 12 Apr 2022 17:20:16 GMT https://community.splunk.com/t5/Splunk-Search/How-to-filter-out-event-in-Splunk-IP-address-search-via-CIDR/m-p/593483#M206561 saurav47 2022-04-12T17:20:16Z Re: Splunk -IP address search via CIDR https://community.splunk.com/t5/Splunk-Search/How-to-filter-out-event-in-Splunk-IP-address-search-via-CIDR/m-p/593484#M206562 <P>you have to try something like this to make it work with lookups&nbsp;</P><P>&nbsp;</P><P><A href="https://community.splunk.com/t5/Splunk-Search/Using-CIDR-in-a-lookup-table/m-p/35787" target="_blank">https://community.splunk.com/t5/Splunk-Search/Using-CIDR-in-a-lookup-table/m-p/35787</A></P><P>&nbsp;</P><P>like/accept if it works for you!</P> Tue, 12 Apr 2022 16:43:02 GMT https://community.splunk.com/t5/Splunk-Search/How-to-filter-out-event-in-Splunk-IP-address-search-via-CIDR/m-p/593484#M206562 mayurr98 2022-04-12T16:43:02Z