Hi, In threat intel module when adding a new threat feed source, The feed contains also sha-256 and MD5 but I can map only one of them to the file_hash var, There is an option to map multiple fields into the same var? ... View more

hello, i have this raw table: 1 2 3 4 5 6 7 8 9 10 0 0 0 0 0 0 0 0 0 0 502 497 496 496 497 500 499 499 498 497 0 0 0 0 0 0 0 0 0 0 496 491 493 492 493 497 496 497 497 492 496 488 492 491 490 496 495 497 496 491 506 502 502 501 504 506 504 504 503 501 496 490 490 490 491 495 493 494 494 491 549 541 542 541 542 547 547 548 547 542 the first line indicates second, the other lines indicate unique tester with his result for each second. how can i create a chart that contains for the 8 testers the timeline with the value of each second? thank you ... View more

hello, I'm trying to do a stats count command and to show "0" (for single value chart) instead of N/A in case the query gets no results found. i tried fillnull but nothing happened. thank you ... View more

hello what is the command to check if a field exists in one column but not the other? for example, to count the "10.2.3.3" because it exists in the source column but not in the target column : source_ |target 10.1.2.3 |10.1.2.3 10.2.3.3 |10.2.2.2 thanks ... View more