Splunk Search

Feature Request: CIDR matching for IPv6 in search

tbias
New Member

Could CIDR matching for IPv6 be enabled in the search command instead of piping to a where command? I have had some data coming through that used to be IPv4 only, now it is coming through as IPv6 hybrid notations and normal IPv6 mixed in.
I'm on 6.4 atm, so if it is already implemented there than all good.

0 Karma

mathiask
Communicator

This problem extends to lookups

It is possible to make IPv4 CIDR lookups, but for IPv6 there are only string matches.
https://answers.splunk.com/answers/407153/ipv6-lookup.html

It would be nice to improve on this.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...