# Expand possible event detail fields for use as query filters

**URL:** <https://community.netwrix.com/t/expand-possible-event-detail-fields-for-use-as-query-filters/112401>\
**Category:** Threat Manager Ideas\
**Tags:** threat-manager, under-review\
**Created:** [August 19, 2025, 11:25am UTC](https://community.netwrix.com/t/expand-possible-event-detail-fields-for-use-as-query-filters/112401 "2025-08-19T11:25:49Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![bradomski](https://avatars.discourse-cdn.com/v4/letter/b/f17d59/32.png) [@bradomski](https://community.netwrix.com/u/bradomski)\
**Post date:** [August 19, 2025, 11:25am UTC](https://community.netwrix.com/t/expand-possible-event-detail-fields-for-use-as-query-filters/112401/1 "2025-08-19T11:25:49Z")

</div>

### What is a one sentence summary of your feature request?

More Event Details fields in query filtering

### Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.

When creating a new investigation, not all fields visible in the event details are available for use as filters in creating queries.

For example its not possible to query over:  
Originating Client Protocol, Client IP, Host IP and more.

### How do you currently solve the challenges you have by not having this feature?

Was not able to find workaround for lack of this functionality.

---

<div class="post-metadata">

**Author:** ![kevin.joyce](https://yyz1.discourse-cdn.com/netwrix/user_avatar/community.netwrix.com/kevin.joyce/32/645_2.png) [@kevin.joyce](https://community.netwrix.com/u/kevin.joyce)\
**Post date:** [August 29, 2025, 6:12pm UTC](https://community.netwrix.com/t/expand-possible-event-detail-fields-for-use-as-query-filters/112401/2 "2025-08-29T18:12:34Z")

</div>

Hi Bartłomiej! Thanks for joining the community.

Can you just verify which version of the product you are on? Also, you included the three fields as examples - are there others you could see yourself wanting or needing to query?

Thanks!
