What is the Query Builder Syntax to filter on a range of Source Address IPs when creating custom report from URL Log?

[jmcnemar]

How do I  create one filter for a range of IP addresses without having to create a filter for each individual IP? Anything I try comes up as invalid filter syntax. I am trying to use the 'in' operator to define an IP range or VLAN (i.e. - none of 192.168.61.1-192.168.61.254, 192.168.61.0 or 192.168.61/24 are valid value for the filter). I cannot find anything in PA-500 documentation for this level of  detail on Query Builder syntax.

- j

[ssharma]

Please try following. Hope this helps.

[panos]

as I know you cannot use range.You can combine some subnets.

[hshah]

Hi Jmcnemar,

There is no such option as of now, however we have a feature request for IP range option. Please contact your Sales  Engineer to vote on your behalf for this FR.

Priority: Medium

FR ID: 1475

Regards,

Hardik Shah

[HULK]

Hello jmcnemar,

Even if PAN doesn't have an option for IP range to build up a custom report ( FR 1475), but looking at your requirement, it can be achieved by a subnet filter ( as mentioned by ssharma), since you are trying to use a subnet here 192.168.61.0/24

192.168.61.1--- 192.168.61.100 --- this type of range is not supported

192.168.61.1-192.168.61.254= 192.168.61.0/24 ---- this is supported

Hope this helps.

Thanks