+plugin:ElasticSearchOpenPlugin -ip:"124.220.0.0/14" +events.leak.severity:"medium" -net:"AMAZON-02" -plugin:"ElasticSearchOpenPlugin"