index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="94.131.119.126" AND destinationport=6541 OR destinationaddress="94.131.119.126" AND destinationport=6542 OR destinationaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="94.131.119.126" AND sourceport=6541 OR sourceaddress="94.131.119.126" AND sourceport=6542 OR sourceaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="94.131.119.126" AND sourceport=6541 OR translatedipaddress="94.131.119.126" AND sourceport=6542 OR translatedipaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6543)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND translatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6543)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="94.131.119.126" AND destinationport=6541 OR destinationaddress="94.131.119.126" AND destinationport=6542 OR destinationaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="94.131.119.126" AND sourceport=6541 OR sourceaddress="94.131.119.126" AND sourceport=6542 OR sourceaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="94.131.119.126" AND sourceport=6541 OR translatedipaddress="94.131.119.126" AND sourceport=6542 OR translatedipaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6543)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND translatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6543)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="94.131.119.126" AND destinationport=6541 OR destinationaddress="94.131.119.126" AND destinationport=6542 OR destinationaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="94.131.119.126" AND sourceport=6541 OR sourceaddress="94.131.119.126" AND sourceport=6542 OR sourceaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="94.131.119.126" AND sourceport=6541 OR translatedipaddress="94.131.119.126" AND sourceport=6542 OR translatedipaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6543)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND translatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6543)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="94.131.119.126" AND destinationport=6541 OR destinationaddress="94.131.119.126" AND destinationport=6542 OR destinationaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="94.131.119.126" AND sourceport=6541 OR sourceaddress="94.131.119.126" AND sourceport=6542 OR sourceaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="94.131.119.126" AND sourceport=6541 OR translatedipaddress="94.131.119.126" AND sourceport=6542 OR translatedipaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6543)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND translatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6543)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="94.131.119.126" AND destinationport=6541 OR destinationaddress="94.131.119.126" AND destinationport=6542 OR destinationaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="94.131.119.126" AND sourceport=6541 OR sourceaddress="94.131.119.126" AND sourceport=6542 OR sourceaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="94.131.119.126" AND sourceport=6541 OR translatedipaddress="94.131.119.126" AND sourceport=6542 OR translatedipaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6543)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND translatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6543)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="94.131.119.126" AND destinationport=6541 OR destinationaddress="94.131.119.126" AND destinationport=6542 OR destinationaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="94.131.119.126" AND sourceport=6541 OR sourceaddress="94.131.119.126" AND sourceport=6542 OR sourceaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="94.131.119.126" AND sourceport=6541 OR translatedipaddress="94.131.119.126" AND sourceport=6542 OR translatedipaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6543)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND translatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6543)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="94.131.119.126" AND destinationport=6541 OR destinationaddress="94.131.119.126" AND destinationport=6542 OR destinationaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="94.131.119.126" AND sourceport=6541 OR sourceaddress="94.131.119.126" AND sourceport=6542 OR sourceaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="94.131.119.126" AND sourceport=6541 OR translatedipaddress="94.131.119.126" AND sourceport=6542 OR translatedipaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6543)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND translatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6543)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="94.131.119.126" AND destinationport=6541 OR destinationaddress="94.131.119.126" AND destinationport=6542 OR destinationaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="94.131.119.126" AND sourceport=6541 OR sourceaddress="94.131.119.126" AND sourceport=6542 OR sourceaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="94.131.119.126" AND sourceport=6541 OR translatedipaddress="94.131.119.126" AND sourceport=6542 OR translatedipaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6543)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND translatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6543)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="94.131.119.126" AND destinationport=6541 OR destinationaddress="94.131.119.126" AND destinationport=6542 OR destinationaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="94.131.119.126" AND sourceport=6541 OR sourceaddress="94.131.119.126" AND sourceport=6542 OR sourceaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="94.131.119.126" AND sourceport=6541 OR translatedipaddress="94.131.119.126" AND sourceport=6542 OR translatedipaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6543)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND translatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6543)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="94.131.119.126" AND destinationport=6541 OR destinationaddress="94.131.119.126" AND destinationport=6542 OR destinationaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="94.131.119.126" AND sourceport=6541 OR sourceaddress="94.131.119.126" AND sourceport=6542 OR sourceaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="94.131.119.126" AND sourceport=6541 OR translatedipaddress="94.131.119.126" AND sourceport=6542 OR translatedipaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6543)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND translatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6543)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="94.131.119.126" AND destinationport=6541 OR destinationaddress="94.131.119.126" AND destinationport=6542 OR destinationaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="94.131.119.126" AND sourceport=6541 OR sourceaddress="94.131.119.126" AND sourceport=6542 OR sourceaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="94.131.119.126" AND sourceport=6541 OR translatedipaddress="94.131.119.126" AND sourceport=6542 OR translatedipaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6543)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND translatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6543)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="94.131.119.126" AND destinationport=6541 OR destinationaddress="94.131.119.126" AND destinationport=6542 OR destinationaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="94.131.119.126" AND sourceport=6541 OR sourceaddress="94.131.119.126" AND sourceport=6542 OR sourceaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="94.131.119.126" AND sourceport=6541 OR translatedipaddress="94.131.119.126" AND sourceport=6542 OR translatedipaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6543)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND translatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6543)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="94.131.119.126" AND destinationport=6541 OR destinationaddress="94.131.119.126" AND destinationport=6542 OR destinationaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="94.131.119.126" AND sourceport=6541 OR sourceaddress="94.131.119.126" AND sourceport=6542 OR sourceaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="94.131.119.126" AND sourceport=6541 OR translatedipaddress="94.131.119.126" AND sourceport=6542 OR translatedipaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6543)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND translatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6543)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="94.131.119.126" AND destinationport=6541 OR destinationaddress="94.131.119.126" AND destinationport=6542 OR destinationaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="94.131.119.126" AND sourceport=6541 OR sourceaddress="94.131.119.126" AND sourceport=6542 OR sourceaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="94.131.119.126" AND sourceport=6541 OR translatedipaddress="94.131.119.126" AND sourceport=6542 OR translatedipaddress="94.131.119.126" AND sourceport=6543)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationport=6543)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND destinationtranslatedport=6543)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="94.131.119.126" AND translatedport=6541 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6542 OR destinationtranslatedaddress="94.131.119.126" AND translatedport=6543)
