how to display the additional fields from datatable in dashboard query

I think you will get ->compilation error compiling query: validating query: validating data sources: joining case with other datasources is not supported: invalid argument

I believe the feature is not supported, if it’s supported, you can do like below: 

// Original conditions

case.alerts.entities.type = "ADDRESS"

$ip = case.alerts.entities.identifier

// Join with the data table %Test

// This condition links the event to rows in %Test where $ip falls within the Value range

net.ip_in_range_cidr($ip, %Test.site_range )

match:

case.priority

outcome:

$Count = count(case.name)

$MatchingIp = $ip

// Add an outcome variable to fetch the sitename from the joined data table row

$SiteName = %Test.site_name

Hi ​@hzmndt , 
Thank you for your response, 

I have a clarification. In the data tables, I have defined both columns with the data type as String. In this case, how can net.ip_in_range_cidr($ip, %Test.site_range) be used with string data types?
Is there any other way for the string datatype !

 

two options:

1. re-create the data table with cidr type
2. use below syntax when query

$cidr = %b_test_100_string.cidr

net.ip_in_range_cidr($e.principal.ip, $cidr)

If you direct use the string type in the net.ip_in_range_cidr, it will get error. 

Thank you!