In Security Analytics > Incident Management > Aggregation Rules, is
there a way to filter via custom meta without using an advanced query
and/or filter via an array? Lastly can a reference to a list in the
reporting module be used as a reference for ...