Graylog Open - Parsing for RFC1918 IP's

Graylog Central (peer support)
1

I already have pipeline rules filtering the source/destination IP addresses into fields, now I want to check if they are RFC1918. Whats the best way to parse if its RFC1918 for a geo lookup?

I was planning on using a Regex but I wasn’t sure if there was a better/different way.

2

well, there is a simple answer for anyone looking: in_private_net