Well, based on IP private IP ranges is a good place to start, don't you think? 10.0.0.0/8
I don't know how I would incorporate that into the search string
... View more
I'm trying to use the NOT operator in a search to exclude internal destination traffic. Any help would be great!
| tstats summariesonly=t count from datamodel=Network_Traffic where * by All_Traffic.dest All_Traffic.src | sort - count
... View more
I would like to use the Network_Traffic datamodel and exclude all internal source network traffic by using the NOT operator. Any help would be greatly appreciated!
... View more