Skip to content

Commit 4c03071

Browse files
authored
Update asn-lookup.md
1 parent 4d8d699 commit 4c03071

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

docs/search/search-query-language/search-operators/asn-lookup.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -18,15 +18,15 @@ lookup\<field\> from asn://default on ip\<ip_address\>
1818
|:--|:--|
1919
| `*` | Use a wildcard (`*`) character as a shortcut to return both fields. |
2020
| `asn` | Autonomous System Number |
21-
| `organization` | Autonomous System Organization Name (Carrier) or ID in some cases. |
22-
| `registering_organization` | |
21+
| `organization` | The name of the organization that owns the ASN or ID in some cases. This organization is responsible for the routing of traffic for network blocks. |
22+
| `registering_organization` | The organization responsible for the actions and content associated with a given block of IP addresses. Registering Organizations include many types of entities, including corporate, government, or educational entities, and ISPs managing the allocation and use of network blocks. |
2323

2424
## Example
2525

2626
The following query references a data stream with IPv4 addresses, parses those IPv4 addresses, and then uses ASN Lookup to retrieve their autonomous system information. 
2727

2828
```sql
29-
_sourceCategory=stream "remote_ip="
29+
_dataTier=all _sourceCategory=*/katta "remote_ip="
3030
| parse regex "(?<ip>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})"
3131
| lookup organization, registering_organization, asn from asn://default on ip = ip
3232
```

0 commit comments

Comments
 (0)