ispublicip.md

id	title	sidebar_label
ispublicip	isPublicIP Search Operator	isPublicIP

The isPublicIP operator checks if an IPv4 address is public and returns a boolean.

Syntax

isPublicIP("<IPv4_string>") as <field>

isPublicIP(<IPv4_string_field>) [as <field>]

Rules

• Returns true if the input is a valid public IPv4 address.
• Invalid IPv4 addresses are dropped from the results.

The following warning is shown when results are dropped or an IPv6 address is detected:
  

Examples

| isPublicIP(dest_host)

The following returns false:

| isPublicIP("10.255.255.255") as isPublic