Splunk Search

match range of ip

AdrienW
Explorer

Hi all,

I have some logs with a field called "src" containing ip.
I would like to use the command "match" like :

if(match(src,"^172.16") but with a range of IP (172.16 to 172.31)

How I could do that?

Thank you

Tags (1)
0 Karma
1 Solution

Ayn
Legend

cidrmatch("172.16.0.0/12",src) ?

View solution in original post

Ayn
Legend

cidrmatch("172.16.0.0/12",src) ?

AdrienW
Explorer

Thanks, I didn't know this function, work great !

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...