Splunk Search

how to convert Ip range to CIDR?

kiran331
Builder

HI I have a logs with field IP_range =1.2.3.0-1.2.3.255, Can I convert to CIDR range like 1.2.3.0/24?

Tags (1)
0 Karma

micahkemp
Champion

You could certainly create a custom search command to do this, and use an existing Python library to do that specific field calculation. A quick googling suggests the netaddr library may do what you need.

Short of some form of custom code (search command, maybe a scripted lookup), I'm not sure you can do that in native SPL.

0 Karma
Get Updates on the Splunk Community!

Developer Spotlight with Brett Adams

In our third Spotlight feature, we're excited to shine a light on Brett—a Splunk consultant, innovative ...

Index This | What can you do to make 55,555 equal 500?

April 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...