This page explains how to use the has_any_ipv4 function in APL.
has_any_ipv4
function in Axiom Processing Language (APL) allows you to check whether a specified column contains any IPv4 addresses from a given set of IPv4 addresses or CIDR ranges. This function is useful when analyzing logs, tracing OpenTelemetry data, or investigating security events to quickly filter records based on a predefined list of IP addresses or subnets.
Splunk SPL users
cidrmatch
or similar functions for working with IP ranges. In APL, has_any_ipv4
offers similar functionality by matching any IPv4 address in a column against multiple values or ranges.ANSI SQL users
has_any_ipv4
function is designed to simplify these checks with concise syntax.Parameter | Description | Type |
---|---|---|
column | The column to evaluate. | string |
ip_list | A list of IPv4 addresses or CIDR ranges. | dynamic |
ip_list
.
has_any_ipv4
to filter requests from specific IPv4 addresses or subnets.
Query
_time | has_ip | status |
---|---|---|
2024-11-14T10:00:00 | true | 200 |