isPrivateIP Search Operator

The isPrivateIP operator checks if an IPv4 address is private and returns a boolean.

Syntax

isPrivateIP("<IPv4_string>") as <field>

isPrivateIP(<IPv4_string_field>) [as <field>]

Rules

• Returns true if the input is a valid private IPv4 address.
• Invalid IPv4 addresses are dropped from the results.

The following warning is shown when results are dropped or an IPv6 address is detected:

  

Examples

| isPrivateIP(dest_host)

The following returns true:

| isPrivateIP("10.255.255.255") as isPrivate

The following returns true:

| isPrivateIP("192.168.0.1") as isPrivate

The following returns false:

| isPrivateIP("127.0.0.1") as isPrivate