filter on subnet in event handler

Something like

srcip==192.168.0.0/16

doesn't seem to be working in a generic text filter.

Is it at all possible any way ?

Best answer by kylezhang_FTNT

For generic text filter, please try this:

srcip ~ 192\.168\.[0-9]+\.[0-9]+

Staff

For generic text filter, please try this:

srcip ~ 192\.168\.[0-9]+\.[0-9]+

New Member

Thanks

Didn't realize this uses regexp syntax. Manuals really don't mention anything...

Staff

Good point. We have just made a note to update the section on Generic Text Filter to mention that it uses regex syntax.

Sign up