Hi @prashant_nakum, have you tried looking at our documentation for YARA-L "Metrics Functions" to see if this information is helpful for building out your data table? 

Someone may provide a better solution for you here but I wanted to send over some of the docs related to metrics in the meantime.

https://cloud.google.com/chronicle/docs/detection/metrics-functions#yara-l_metrics_functions

Hi @vaskenh,

Thanks for your quick response!

However, I am looking to calculate the percentage based on the count of occurrences for each source IP address. I couldn’t find any function that directly supports or any other alternative for this calculation.

Is there any alternative approach or function available to achieve this?

Thanks,
Prashant Nakum

At the moment, we do not have a great solution for this. I am hopeful that with some current development work will unlock this later this year but I don't have a specific timeframe to share at the moment.