index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("172.105.178.119","139.59.93.223","207.246.101.153","23.19.58.52","155.138.205.35","45.79.239.23","95.216.138.82","194.180.174.6","185.202.93.201","185.10.68.235","185.183.96.147","185.225.19.246","185.176.220.198","5.189.222.161","46.161.40.172")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("172.105.178.119","139.59.93.223","207.246.101.153","23.19.58.52","155.138.205.35","45.79.239.23","95.216.138.82","194.180.174.6","185.202.93.201","185.10.68.235","185.183.96.147","185.225.19.246","185.176.220.198","5.189.222.161","46.161.40.172")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("172.105.178.119","139.59.93.223","207.246.101.153","23.19.58.52","155.138.205.35","45.79.239.23","95.216.138.82","194.180.174.6","185.202.93.201","185.10.68.235","185.183.96.147","185.225.19.246","185.176.220.198","5.189.222.161","46.161.40.172")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("172.105.178.119","139.59.93.223","207.246.101.153","23.19.58.52","155.138.205.35","45.79.239.23","95.216.138.82","194.180.174.6","185.202.93.201","185.10.68.235","185.183.96.147","185.225.19.246","185.176.220.198","5.189.222.161","46.161.40.172")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("172.105.178.119","139.59.93.223","207.246.101.153","23.19.58.52","155.138.205.35","45.79.239.23","95.216.138.82","194.180.174.6","185.202.93.201","185.10.68.235","185.183.96.147","185.225.19.246","185.176.220.198","5.189.222.161","46.161.40.172")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("172.105.178.119","139.59.93.223","207.246.101.153","23.19.58.52","155.138.205.35","45.79.239.23","95.216.138.82","194.180.174.6","185.202.93.201","185.10.68.235","185.183.96.147","185.225.19.246","185.176.220.198","5.189.222.161","46.161.40.172")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.178.119","139.59.93.223","207.246.101.153","23.19.58.52","155.138.205.35","45.79.239.23","95.216.138.82","194.180.174.6","185.202.93.201","185.10.68.235","185.183.96.147","185.225.19.246","185.176.220.198","5.189.222.161","46.161.40.172")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.178.119","139.59.93.223","207.246.101.153","23.19.58.52","155.138.205.35","45.79.239.23","95.216.138.82","194.180.174.6","185.202.93.201","185.10.68.235","185.183.96.147","185.225.19.246","185.176.220.198","5.189.222.161","46.161.40.172")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.178.119","139.59.93.223","207.246.101.153","23.19.58.52","155.138.205.35","45.79.239.23","95.216.138.82","194.180.174.6","185.202.93.201","185.10.68.235","185.183.96.147","185.225.19.246","185.176.220.198","5.189.222.161","46.161.40.172")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.178.119","139.59.93.223","207.246.101.153","23.19.58.52","155.138.205.35","45.79.239.23","95.216.138.82","194.180.174.6","185.202.93.201","185.10.68.235","185.183.96.147","185.225.19.246","185.176.220.198","5.189.222.161","46.161.40.172")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.178.119","139.59.93.223","207.246.101.153","23.19.58.52","155.138.205.35","45.79.239.23","95.216.138.82","194.180.174.6","185.202.93.201","185.10.68.235","185.183.96.147","185.225.19.246","185.176.220.198","5.189.222.161","46.161.40.172")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("172.105.178.119","139.59.93.223","207.246.101.153","23.19.58.52","155.138.205.35","45.79.239.23","95.216.138.82","194.180.174.6","185.202.93.201","185.10.68.235","185.183.96.147","185.225.19.246","185.176.220.198","5.189.222.161","46.161.40.172")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "menorukis.su" OR destinationhostname CONTAINS "" OR destinationhostname CONTAINS "fidufagios.com" OR destinationhostname CONTAINS "feristoaul.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "menorukis.su" OR destinationhostname CONTAINS "" OR destinationhostname CONTAINS "fidufagios.com" OR destinationhostname CONTAINS "feristoaul.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "menorukis.su" OR destinationhostname CONTAINS "" OR destinationhostname CONTAINS "fidufagios.com" OR destinationhostname CONTAINS "feristoaul.com")
