Please! Help me fix search code. Thank you very much!
Hi @mrphu,
the WHERE option must be located before the FROM option.
In addition, the tokens that you used (e.g. $srcip$) are used in dashboards, you cannoy use them as is in a search.
Ciao.
Giuseppe
