Copy and Paste into SIEM Search Bar - (Replace XXXX values)

SELECT new_logs.uuid, new_logs.organization_id, new_logs.event_code_string AS ecs_event_code, new_logs.event_action AS event_action, new_logs.source_ip AS source_ip, new_logs.destination_ip AS destination_ip, new_logs.host_hostname AS host_hostname, new_logs.message FROM new_logs AS logs WHERE new_logs.organization_id = XXXXX AND new_logs.account_id = XXXXXX AND new_logs.uuid >= 'XXXX-XXXX-XXXX' AND new_logs.uuid < 'XXXX-XXXX-XXXX' AND new_logs.event_provider = 'Fortigate' ORDER BY new_logs.uuid DESC LIMIT 100