Forum Discussion

mrboxx's avatar
mrboxx
Brass Contributor
Feb 29, 2020

CIDR matching

Hi

 

Is there any operator to search for IP address matches using CIDR notation rather than just patterns? Patterns work when the subnets break on octets but if you're like me that's often not the case. 

 

e.g. IPAddress inCidr 10.1.0.0/23

 

Thanks!

  • Jeff Walzer's avatar
    Jeff Walzer
    Iron Contributor
    Mar 02, 2020

    mrboxx 

     

    I believe you can use a regex for this search as I cannot see any queries related to CIDR matching. Something along the lines of the following which worked for a query for me:

     

    | where IpAddress matches regex "136.142.*"

Resources