Skip to main content

isPublicIP Search Operator

The isPublicIP operator checks if an IPv4 address is public and returns a boolean.


isPublicIP("<IPv4_string>") as <field>
isPublicIP(<IPv4_string_field>) [as <field>]


  • Returns true if the input is a valid public IPv4 address.
  • Invalid IPv4 addresses are dropped from the results.

The following warning is shown when results are dropped or an IPv6 address is detected:

isprivateip operator


| isPublicIP(dest_host)

The following returns false:

| isPublicIP("") as isPublic
Sumo Logic YouTubeSumo Logic Twitter
Privacy Statement
Terms of Use

Copyright © 2022 by Sumo Logic, Inc.