You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Description:
We propose adding a CIDR (Classless Inter-Domain Routing) function to OpenSearch's Piped Processing Language (PPL) to provide built-in IP address range matching capabilities. This feature would be similar to the ip_range CIDR function already in OpenSearch, enhancing PPL's ability to work with IP addresses and network ranges.
Proposed Functionality:
The CIDR function should take two arguments: an IP address and a CIDR block.
It should return a boolean value indicating whether the IP address is within the specified CIDR range.
The function should support both IPv4 and IPv6 addresses and ranges.
It should handle various CIDR notation formats (e.g., "192.168.0.0/24" or "2001:db8::/32").
Example Usage:
... | whereCIDR(src_ip, "192.168.0.0/24")
This would filter results to include only those where src_ip is within the 192.168.0.0/24 network.
Description:
We propose adding a CIDR (Classless Inter-Domain Routing) function to OpenSearch's Piped Processing Language (PPL) to provide built-in IP address range matching capabilities. This feature would be similar to the ip_range CIDR function already in OpenSearch, enhancing PPL's ability to work with IP addresses and network ranges.
Proposed Functionality:
Example Usage:
This would filter results to include only those where src_ip is within the 192.168.0.0/24 network.
This would filter results to include destinations in any of the private IP ranges.
This would filter results for IPv6 addresses within the specified range.
Implementation Considerations:
Support for PPL
CIDR
functionality is required for both:OpenSearch based PPL engine
CIDR
IP range command support #3036Spark based PPL engine
CIDR
IP range command support opensearch-spark#671The text was updated successfully, but these errors were encountered: