index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("139.60.160.200","93.190.139.223","45.227.255.190","193.162.143.218","168.100.11.72","93.190.143.101","88.80.147.102","193.38.235.234","174.138.62.35","185.215.113.39","185.182.193.120")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("139.60.160.200","93.190.139.223","45.227.255.190","193.162.143.218","168.100.11.72","93.190.143.101","88.80.147.102","193.38.235.234","174.138.62.35","185.215.113.39","185.182.193.120")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("139.60.160.200","93.190.139.223","45.227.255.190","193.162.143.218","168.100.11.72","93.190.143.101","88.80.147.102","193.38.235.234","174.138.62.35","185.215.113.39","185.182.193.120")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("139.60.160.200","93.190.139.223","45.227.255.190","193.162.143.218","168.100.11.72","93.190.143.101","88.80.147.102","193.38.235.234","174.138.62.35","185.215.113.39","185.182.193.120")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("139.60.160.200","93.190.139.223","45.227.255.190","193.162.143.218","168.100.11.72","93.190.143.101","88.80.147.102","193.38.235.234","174.138.62.35","185.215.113.39","185.182.193.120")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("139.60.160.200","93.190.139.223","45.227.255.190","193.162.143.218","168.100.11.72","93.190.143.101","88.80.147.102","193.38.235.234","174.138.62.35","185.215.113.39","185.182.193.120")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("139.60.160.200","93.190.139.223","45.227.255.190","193.162.143.218","168.100.11.72","93.190.143.101","88.80.147.102","193.38.235.234","174.138.62.35","185.215.113.39","185.182.193.120")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("139.60.160.200","93.190.139.223","45.227.255.190","193.162.143.218","168.100.11.72","93.190.143.101","88.80.147.102","193.38.235.234","174.138.62.35","185.215.113.39","185.182.193.120")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("139.60.160.200","93.190.139.223","45.227.255.190","193.162.143.218","168.100.11.72","93.190.143.101","88.80.147.102","193.38.235.234","174.138.62.35","185.215.113.39","185.182.193.120")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("139.60.160.200","93.190.139.223","45.227.255.190","193.162.143.218","168.100.11.72","93.190.143.101","88.80.147.102","193.38.235.234","174.138.62.35","185.215.113.39","185.182.193.120")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("139.60.160.200","93.190.139.223","45.227.255.190","193.162.143.218","168.100.11.72","93.190.143.101","88.80.147.102","193.38.235.234","174.138.62.35","185.215.113.39","185.182.193.120")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("139.60.160.200","93.190.139.223","45.227.255.190","193.162.143.218","168.100.11.72","93.190.143.101","88.80.147.102","193.38.235.234","174.138.62.35","185.215.113.39","185.182.193.120")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://185.182.193.120/06599379103BD9028AB56AE0EBED457D0")
