Splunk Search

Feature Request: CIDR matching for IPv6 in search

tbias
New Member

Could CIDR matching for IPv6 be enabled in the search command instead of piping to a where command? I have had some data coming through that used to be IPv4 only, now it is coming through as IPv6 hybrid notations and normal IPv6 mixed in.
I'm on 6.4 atm, so if it is already implemented there than all good.

0 Karma

mathiask
Communicator

This problem extends to lookups

It is possible to make IPv4 CIDR lookups, but for IPv6 there are only string matches.
https://answers.splunk.com/answers/407153/ipv6-lookup.html

It would be nice to improve on this.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...