index=* signature="SQL*" ....
In this way, I want to see the list of source IPs detected as signatures with the string "SQL" in the B class band.
How to get results in IP band