Hello,
I am trying to drilldown in a dashboard to a URL that checks malicious IP's and Domains.
Issue I am having is the URL for IP search and Domain search is different.
All IOC's are in the same field called "threat_match_value" but there is another field in log called "threat_key" which specifies if it is a IP or Domain.
Is it possible to add a condition like:
If threat_key=Domain drill down to Domain URL but the click.value be the "threat_match_value".
Don't really want to separate into 2 panels
Thanks,
