Skip to main content
Question

Is there a way to filter out multiple IP address without using multiple drop functions?

  • March 11, 2025
  • 1 reply
  • 11 views

In other words, what’s the best way to create a whitelist when evaluating log data?

1 reply

Jon Rust
Forum|alt.badge.img
  • Employee
  • March 11, 2025

A lookup table with inline lookup function:

C.Lookup('filename.csv','key_field').match(lookup_value)

edit: see also C.LookupCIDR() and C.Net.cidrMatch()