dataset = panw_ngfw_url_raw
| filter (uri contains "/wp-content/plugins/sniplets/modules/syntax_highlight.php" and uri contains "../")
| fields _time, source_ip, dest_ip, url_domain, uri, url_category
| sort desc _time