Using the "like" operator in Filtered Asset Search with IP Addresses

Trying to provide some more clarification around how to use the “like” operator within the Filtered Asset Search when trying to build either Asset Groups or Tags.

The “like” operator can be used to filter with Regex but pay attention to the escape characters. In the Asset filter you will need to double the backslash escape character like so: 192\\.\\d+\\.2 this gives me anything that starts with 192 and has the third octet starting with 2.
Screen Shot 2022-08-05 at 9.15.02 AM

Another example would be [0-9]+\\.[0-9]+\\.[0-9]+\\.[0-9][0-9]8
Screen Shot 2022-08-05 at 10.48.04 AM

This will give me all assets where the third octet has at least three digits and ends in 8

Another way would be [0-9]+\\.[0-9]+\\.[0-9]+\\.[0-9]+8
Screen Shot 2022-08-05 at 10.58.37 AM
This would give me all assets that have at least 2 or 3 digits in the last octet but end in 8.

Alternatively if you do [0-9]+\\.[0-9]+\\.[0-9]+\\.8 you will get all assets where the last octet starts with 8.

Now if you just want to indiscriminately find any asset that ends in 8 without specifying the amount of digits in the last octet (whether it be 1, 2, or 3) you could use [0-9]+\\.[0-9]+\\.[0-9]+\\.?8\$
Screen Shot 2022-08-05 at 12.08.59 PM

2 Likes

Not sure if this will be seen in a timely manner but I am trying to return assets with the pattern 10.x.20.y where x = any number but y is only 1 or 2. The closest result set I can get is using 10.[0-9]{1,3}.20.1 but that includes results with .15, .150, etc.