I wonder if it is possible to use CIDR notation in the search field? I would like to use something like “source-address:10.66.27.128/27”?
I see it is supported to use cidr match in pipeline rules but i see no mention of using cidr in the search?
When i try i only get errors like this one:
Cannot parse ‘source-address: 10.66.0.0/16’: Lexical error at line 1, column 29. Encountered: after : "/16"
When i escape the / i get no hits? Maybe it is the wrong type on the source-address field?