On This Page

Home / Search/ Language Reference/ Functions/ Scalar Functions/ String Functions/parse_ipv6

parse_ipv6 ​

The parse_ipv6 function converts IPv6 or IPv4 string to a canonical IPv6 string representation.

Syntax ​

parse_ipv6( Expression )

Arguments ​

  • Expression: String expression representing IPv6/IPv4 network address that will be converted to canonical IPv6 representation. Denote a subnet mask with a forward slash /.

Results ​

If the conversion is successful, returns a string representing a canonical IPv6 network address.

If the conversion fails, returns null.

Examples ​

print theData='192.168.1.2'  | extend parsed_data=parse_ipv6(theData) | render event
Run in Cribl Search
print theData='abcd::ffff:c0a8:0102'  | extend parsed_data=parse_ipv6(theData) | render event
Run in Cribl Search

This example returns '0000:0000:0000:0000:0000:ffff:7f00:0001':

parse_ipv6("127.0.0.1")

This example returns 'fe80:0000:0000:0000:085d:e82c:9446:7994':

parse_ipv6(":fe80::85d:e82c:9446:7994")