Showing results for 
Show  only  | Search instead for 
Did you mean: 

USQL: IP aggregating and grouping through condition

DynaMight Guru
DynaMight Guru

In USQL, we have access to usersession.ip. There are several issues with it though.

One is how can we do a query that aggregates certain amount of IPs, say 192.168* ? Now, we can't use string functions like STARTSWITH or LIKE, as it "only works on text fields.".  We can make  comparisons like "where ip >= "" and ip <= """, but was wondering if there is a simple way?

Also, if we have internal addresses, they are normally not masked. So individual IPs appear, How can I group them? It is possible through "condition", but is there another way?

Antonio Sousa

DynaMight Legend
DynaMight Legend

Any luck with this @AntonioSousa 


Featured Posts