Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to whitelist multiple IP addresses from datamodel search? (no need to use lookups)?

$
0
0
Hi Guys, Can you please tell me how to exclude/whitelist multiple ip adresses from the **datamodel** search here is the example: **All_Traffic.dest_ip!=10.10.10.10 All_Traffic.dest_ip!=10.10.10.10 All_Traffic.dest_ip!=10.10.10.13** I would like to have it more clear like: **All_Traffic.dest_ip!=10.10.10.10, 10.10.10.10, 10.10.10.13** Unfortunately it doesn't work. Which parameter needs to be used ?? Thanks!

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>