Newbie here...!
I have a list of IP's in a CSV from which I need to exclude few IP's (IP1, IP2, IP3, etc.,) from the results of a query. Here's how my search looks.
Example search:
base search
| join type=left ip
[| inputlookup iplist.csv |fields ip]
|fields
Any help would be appreciated. Thanks 🙂
Filter the results using the where command.
base search
| join type=left ip
[| inputlookup iplist.csv |fields ip]
| where NOT ip IN (<list of IPs to exclude>)
|fields
Filter the results using the where command.
base search
| join type=left ip
[| inputlookup iplist.csv |fields ip]
| where NOT ip IN (<list of IPs to exclude>)
|fields