index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("188.68.221.203","93.115.18.248","52.95.148.162","84.38.183.174","80.249.145.212","185.170.213.186")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("188.68.221.203","93.115.18.248","52.95.148.162","84.38.183.174","80.249.145.212","185.170.213.186")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("188.68.221.203","93.115.18.248","52.95.148.162","84.38.183.174","80.249.145.212","185.170.213.186")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("188.68.221.203","93.115.18.248","52.95.148.162","84.38.183.174","80.249.145.212","185.170.213.186")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("188.68.221.203","93.115.18.248","52.95.148.162","84.38.183.174","80.249.145.212","185.170.213.186")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("188.68.221.203","93.115.18.248","52.95.148.162","84.38.183.174","80.249.145.212","185.170.213.186")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("188.68.221.203","93.115.18.248","52.95.148.162","84.38.183.174","80.249.145.212","185.170.213.186")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("188.68.221.203","93.115.18.248","52.95.148.162","84.38.183.174","80.249.145.212","185.170.213.186")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("188.68.221.203","93.115.18.248","52.95.148.162","84.38.183.174","80.249.145.212","185.170.213.186")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("188.68.221.203","93.115.18.248","52.95.148.162","84.38.183.174","80.249.145.212","185.170.213.186")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("188.68.221.203","93.115.18.248","52.95.148.162","84.38.183.174","80.249.145.212","185.170.213.186")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("188.68.221.203","93.115.18.248","52.95.148.162","84.38.183.174","80.249.145.212","185.170.213.186")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "moduleloader.s3.eu-west-2.amazonaws.com" OR destinationhostname CONTAINS "discountshadesdirect.com" OR destinationhostname CONTAINS "bimelectrical.com" OR destinationhostname CONTAINS "clippershipintl.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "moduleloader.s3.eu-west-2.amazonaws.com" OR destinationhostname CONTAINS "discountshadesdirect.com" OR destinationhostname CONTAINS "bimelectrical.com" OR destinationhostname CONTAINS "clippershipintl.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "moduleloader.s3.eu-west-2.amazonaws.com" OR destinationhostname CONTAINS "discountshadesdirect.com" OR destinationhostname CONTAINS "bimelectrical.com" OR destinationhostname CONTAINS "clippershipintl.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("moduleloader.s3.eu-west-2.amazonaws.com","discountshadesdirect.com","bimelectrical.com","clippershipintl.com")
