783 B
783 B
CIDR_MATCH [esql-cidr_match]
Syntax
:::{image} ../../../../../images/cidr_match.svg :alt: Embedded :class: text-center :::
Parameters
ip- IP address of type
ip(both IPv4 and IPv6 are supported). blockX- CIDR block to test the IP against.
Description
Returns true if the provided IP is contained in one of the provided CIDR blocks.
Supported types
| ip | blockX | result |
|---|---|---|
| ip | keyword | boolean |
| ip | text | boolean |
Example
FROM hosts
| WHERE CIDR_MATCH(ip1, "127.0.0.2/32", "127.0.0.3/32")
| KEEP card, host, ip0, ip1
| card:keyword | host:keyword | ip0:ip | ip1:ip |
|---|---|---|---|
| eth1 | beta | 127.0.0.1 | 127.0.0.2 |
| eth0 | gamma | fe80::cae2:65ff:fece:feb9 | 127.0.0.3 |