(
Optional
)
Add
queries
to the Query Builder to filter the report output by attributes such
as source/destination IP addresses, users, or zones. For example,
if you know that traffic initiated from the IP address 192.0.2.0
contains no potential botnet activity, you can add
not (addr.src in 192.0.2.0)
as
a query to exclude that host from the report output.
