index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("144.217.138.155","54.38.49.6","148.251.71.182")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("144.217.138.155","54.38.49.6","148.251.71.182")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("144.217.138.155","54.38.49.6","148.251.71.182")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("144.217.138.155","54.38.49.6","148.251.71.182")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("144.217.138.155","54.38.49.6","148.251.71.182")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("144.217.138.155","54.38.49.6","148.251.71.182")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("144.217.138.155","54.38.49.6","148.251.71.182")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("144.217.138.155","54.38.49.6","148.251.71.182")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("144.217.138.155","54.38.49.6","148.251.71.182")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("144.217.138.155","54.38.49.6","148.251.71.182")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("144.217.138.155","54.38.49.6","148.251.71.182")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("144.217.138.155","54.38.49.6","148.251.71.182")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "0standavalue0.xyz" OR destinationhostname CONTAINS "0storageatools0.xyz" OR destinationhostname CONTAINS "0brandaeyes0.xyz")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "0standavalue0.xyz" OR destinationhostname CONTAINS "0storageatools0.xyz" OR destinationhostname CONTAINS "0brandaeyes0.xyz")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "0standavalue0.xyz" OR destinationhostname CONTAINS "0storageatools0.xyz" OR destinationhostname CONTAINS "0brandaeyes0.xyz")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("0standavalue0.xyz","0storageatools0.xyz","0brandaeyes0.xyz")
