preset = network_story
| filter action_remote_ip in ("46.246.84.17")
| fields agent_hostname, action_local_ip, action_remote_ip, action_remote_port, action_app_id, _time
| sort desc _time