Update docs/xdr/features/investigate/sekoia_operating_language.md

Co-authored-by: Gael Muller <[email protected]>
SEKOIA-IO · Feb 6, 2025 · ebc6ccc · ebc6ccc
1 parent 6a313c2
commit ebc6ccc
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/docs/xdr/features/investigate/sekoia_operating_language.md b/docs/xdr/features/investigate/sekoia_operating_language.md
@@ -197,6 +197,7 @@ List the unique values of client.ip from the events table
 
 ``` shell
 events
+| where timestamp > ago(24h)
 | distinct client.ip
 | limit 100