We have updated our Terms of Service, Code of Conduct, and Addendum.

Is there a way to filter out multiple IP address without using multiple drop functions?

In other words, what’s the best way to create a whitelist when evaluating log data?

Best Answer

  • Jon Rust
    Jon Rust Posts: 475 mod
    Answer ✓

    A lookup table with inline lookup function:

    C.Lookup('filename.csv','key_field').match(lookup_value)

    edit: see also C.LookupCIDR() and C.Net.cidrMatch()

Answers

  • Jon Rust
    Jon Rust Posts: 475 mod
    Answer ✓

    A lookup table with inline lookup function:

    C.Lookup('filename.csv','key_field').match(lookup_value)

    edit: see also C.LookupCIDR() and C.Net.cidrMatch()