Skip to content

Instantly share code, notes, and snippets.

@jfrantz1-r7
Created October 12, 2018 16:08
Show Gist options
  • Save jfrantz1-r7/c12a191c884b53c5ff9edd4ad137c091 to your computer and use it in GitHub Desktop.
Save jfrantz1-r7/c12a191c884b53c5ff9edd4ad137c091 to your computer and use it in GitHub Desktop.
where(NOT /US/ AND source_ip=/\b((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\.|$)){4}\b/ AND source_ip!=/unknown/i AND source_ip!=/0.0.0.0/) groupby(user)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment