Skip to main content
ytlpsnet
New Member
November 4, 2016
Question

How to search traffic log with multiple source ip addresses (more than 100 ip addresses)?

  • November 4, 2016
  • 8 replies
  • 44226 views

Is there any way that i can search for more than 100 ip addresses? What i do the searching in analyzer as below:

 

srcip=1.1.1.1 or srcip=2.2.2.2 or srcip=3.3.3.3

 

And this way will allow maximum 30 ip addresses to key into search field, so is there any way to search more 100 ip addresses at once?

    8 replies

    ytlpsnet
    ytlpsnetAuthor
    New Member
    November 4, 2016

    I know there is enable column filter option, once you enabled it then you can filter only 1 ip address, i need more than that...

    abelio
    SuperUser
    SuperUser
    November 4, 2016

    Hi,

    You can use wildcard i.e, see attached screenshot

    emnoc
    New Member
    November 4, 2016

    or even no range of address

     

    vd=soc01 srcip=10.1.1.20-10.1.1.26

     

     

     

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT