Re: search a subnet - Splunk Community

Splunk Search

How do I specify a search on a certain subnet?

You can also try this:

src_IP=192.168.1.0/24

Try the solution from this post:

http://answers.splunk.com/answers/23554/cidr-match

Have you tried cidrmatch?

http://docs.splunk.com/Documentation/Splunk/6.0/SearchReference/CommonEvalFunctions

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Reuse: Word-play

This puzzle series (first published here) is based on analysing words.Some of the statements in your puzzle ...

Tuning Edge Processor in Hybrid Mode: What Limits Each Data Path

When you run Edge Processor in hybrid mode, alongside a Splunk heavy forwarder on the same host, two questions ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...