Part 4: A High Level View - Video 5

So far, we’ve relied on a single data source throughout this video. Lets mix in a new data source that contains email data for our organization. First, let's get a general idea of the emails hitting our domain.

Query 8:
Another comparison operator “ ~ ”

tag=envolvelabs-Email ax recipient ~ "envolvelabs.com"
| table

Query 9:
Another comparison operator “ !~ ” to filter out fields with specific matching values

tag=envolvelabs-Email ax recipient ~ "envolvelabs.com" sender
!~ "envolvelabs.com"
| count by sender
| sort by count desc
| table sender coun