I want to exclude both primary and secondary IP addresses from a search.
src_ip!=220.127.116.11 AND src_ip!=18.104.22.168
Can I combine the two by just using a wildcard in just one octet?
For example, something like:
You could use a wildcard but that will match more than what you require since that also includes : 22.214.171.124,126.96.36.199 and others that you might want to keep.
If you really want to use a regex you could try something like what is shown here :
Your search would look like this :
yourbasesearch | regex src_ip!="192.50.24[4,5].10"
Let me know if that helps.