How should I format the lookup definition so that it takes both CIDR match and indivisual IP match What I mean to say is if I go to advance settings and change the match criteria to CIDR(IP) its not matching the elements where the IP is single IP and not a CIDR
... View more
I have a lookup table with 2 fields IP and Name IP Name ['1.2.3.4', '2.3.5.0/24'] -> name1 ['1.2.3.4',.6.7.8.9/31, 4.5.6.7,1.1.1.1] -> name2 [3.3.3.3/31, 4.4.4.4] -> name3 I have a list of IPs like "1.2.3.4, 2.3.5.1" This should give me result of lookup table names where the IPs are present. So in the above example result would be as the "1.2.3.4, 2.3.5.1" are present in first 2 rows. name1 name2
... View more
I want to write a splunk query which will run over the same timewindow but on a different date selected in the datetime picker. For ex. lets say I select 8th aug 10am to 8th august 10:15am range in the datepicker my query should give me result for the timewindow 1st aug 10am to 1st aug 10:15am.
... View more