To filter a subnet for any variable for PA logs:
Add Filter -> Edit as Query DSL { "query": { "range": { "<variable>": { "gte": "<first_subnet_ip>", "lt": "<last_subnet_ip>" } } } }