Splunk Search

how to convert Ip range to CIDR?

kiran331
Builder

HI I have a logs with field IP_range =1.2.3.0-1.2.3.255, Can I convert to CIDR range like 1.2.3.0/24?

Tags (1)
0 Karma

micahkemp
Champion

You could certainly create a custom search command to do this, and use an existing Python library to do that specific field calculation. A quick googling suggests the netaddr library may do what you need.

Short of some form of custom code (search command, maybe a scripted lookup), I'm not sure you can do that in native SPL.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...