cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

USQL: IP aggregating and grouping through condition

AntonioSousa
DynaMight Guru
DynaMight Guru

In USQL, we have access to usersession.ip. There are several issues with it though.

One is how can we do a query that aggregates certain amount of IPs, say 192.168* ? Now, we can't use string functions like STARTSWITH or LIKE, as it "only works on text fields.".  We can make  comparisons like "where ip >= "192.168.0.0" and ip <= "192.168.255.255"", but was wondering if there is a simple way?

Also, if we have internal addresses, they are normally not masked. So individual IPs appear, How can I group them? It is possible through "condition", but is there another way?

Antonio Sousa
1 REPLY 1

ChadTurner
DynaMight Legend
DynaMight Legend

Any luck with this @AntonioSousa 

-Chad

Featured Posts