index="activity" AND rg_functionality="Next Generation Firewall" and (requestclientapplication CONTAINS "dns" OR requestclientapplication CONTAINS "rmi" OR requestclientapplication CONTAINS "lower" OR requestclientapplication CONTAINS "upper" OR requestclientapplication CONTAINS "ldap" OR requestclientapplication CONTAINS "nis" OR requestclientapplication CONTAINS "iiop" OR requestclientapplication CONTAINS "corba" OR requestclientapplication CONTAINS "nds" OR requestclientapplication CONTAINS "http")
index="activity" AND rg_functionality="Next Generation Firewall" and requestclientapplication CONTAINS "//" AND ipaddress NOT NULL AND requestclientapplication NOT NULL AND (requestclientapplication CONTAINS "${upper:" OR requestclientapplication CONTAINS "${lower:" OR requestclientapplication CONTAINS "${::" OR requestclientapplication CONTAINS "%7Bjndi" OR requestclientapplication CONTAINS "$%7Benv:" OR requestclientapplication CONTAINS "${env:" OR requestclientapplication CONTAINS "${base64:" OR requestclientapplication CONTAINS "257Bjndi")
index="activity" AND rg_functionality="Next Generation Firewall" and (requestclientapplication contains "%6a" or requestclientapplication contains "%4a" or requestclientapplication contains "%6e" or requestclientapplication contains "%1e" or requestclientapplication contains "%14" or requestclientapplication contains "%64" or requestclientapplication contains "%19" or requestclientapplication contains "%69" or requestclientapplication contains "%3a" OR requestclientapplication CONTAINS "%7Bjndi")
index="activity" AND rg_functionality="Next Generation Firewall" and (requesturl CONTAINS "dns" OR requesturl CONTAINS "rmi" OR requesturl CONTAINS "lower" OR requesturl CONTAINS "upper" OR requesturl CONTAINS "ldap" OR requesturl CONTAINS "nis" OR requesturl CONTAINS "iiop" OR requesturl CONTAINS "corba" OR requesturl CONTAINS "nds" OR requesturl CONTAINS "http")
index="activity" AND rg_functionality="Next Generation Firewall" and requesturl CONTAINS "//" AND ipaddress NOT NULL AND requesturl NOT NULL AND (requesturl CONTAINS "${upper:" OR requesturl CONTAINS "${lower:" OR requesturl CONTAINS "${::" OR requesturl CONTAINS "%7Bjndi" OR requesturl CONTAINS "$%7Benv:" OR requesturl CONTAINS "${env:" OR requesturl CONTAINS "${base64:" OR requesturl CONTAINS "257Bjndi")
index="activity" AND rg_functionality="Next Generation Firewall" and (requestcontext CONTAINS "dns" OR requestcontext CONTAINS "rmi" OR requestcontext CONTAINS "lower" OR requestcontext CONTAINS "upper" OR requestcontext CONTAINS "ldap" OR requestcontext CONTAINS "nis" OR requestcontext CONTAINS "iiop" OR requestcontext CONTAINS "corba" OR requestcontext CONTAINS "nds" OR requestcontext CONTAINS "http")
index="activity" AND rg_functionality="Next Generation Firewall" and requestcontext CONTAINS "//" AND ipaddress NOT NULL AND requestcontext NOT NULL AND (requestcontext CONTAINS "${upper:" OR requestcontext CONTAINS "${lower:" OR requestcontext CONTAINS "${::" OR requestcontext CONTAINS "%7Bjndi" OR requestcontext CONTAINS "$%7Benv:" OR requestcontext CONTAINS "${env:" OR requestcontext CONTAINS "${base64:" OR requestcontext CONTAINS "257Bjndi")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("212.192.216.46","179.43.175.101")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("212.192.216.46","179.43.175.101")
