index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("104.168.48.120","185.99.132.67")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("104.168.48.120","185.99.132.67")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("104.168.48.120","185.99.132.67")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("104.168.48.120","185.99.132.67")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("104.168.48.120","185.99.132.67")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("104.168.48.120","185.99.132.67")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("104.168.48.120","185.99.132.67")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("104.168.48.120","185.99.132.67")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("104.168.48.120","185.99.132.67")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("104.168.48.120","185.99.132.67")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("104.168.48.120","185.99.132.67")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("104.168.48.120","185.99.132.67")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ouchimin.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ouchimin.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "ouchimin.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://leosoko.com/components/com_kunena/views/home/tmpl/appeal.php","https://xtra.co.nz/1542docs_xtra.co.html")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND ((destinationaddress="104.168.48.120" AND destinationport=443) OR (destinationaddress="185.99.132.67" AND destinationport=443))
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND ((destinationaddress="104.168.48.120" AND destinationport=443) OR (destinationaddress="185.99.132.67" AND destinationport=443))
