[META]PPL Add CIDR
IP range command support
#3035
Labels
catch-all acknowledged
Marks issues caught in catch-all triage for searchability
enhancement
New feature or request
PPL
Piped processing language
Description:
We propose adding a CIDR (Classless Inter-Domain Routing) function to OpenSearch's Piped Processing Language (PPL) to provide built-in IP address range matching capabilities. This feature would be similar to the ip_range CIDR function already in OpenSearch, enhancing PPL's ability to work with IP addresses and network ranges.
Proposed Functionality:
Example Usage:
This would filter results to include only those where src_ip is within the 192.168.0.0/24 network.
This would filter results to include destinations in any of the private IP ranges.
This would filter results for IPv6 addresses within the specified range.
Implementation Considerations:
Support for PPL
CIDR
functionality is required for both:OpenSearch based PPL engine
CIDR
IP range command support #3036Spark based PPL engine
CIDR
IP range command support opensearch-spark#671The text was updated successfully, but these errors were encountered: