{% for sensor, alert_data in alerts.items() %}

{{ sensor }}

{% for client, client_data in alert_data.items()|sort(attribute='0') %} {% for query, query_data in client_data.items()|sort(attribute='1.first_occurence') %} {% for event_uuid, event in query_data['events'].items()|sort(attribute='1.publication')|reverse %} {% endfor %} {% endfor %} {% endfor %}
DNS client Query Answers First DNS query MISP IOC MISP Event Publication Organization Comment Tags
{{ client }} {{ query }} {% for answer in query_data['answers'] %} {{ answer }}
{% endfor %}
{{ query_data['first_occurence'] }}
{{ event["ioc"] }} {{ event["info"] }} {{ event["publication"] }} {{ event["organization"] }} {{ event["comment"] }} {% for tag in event["tags"]%} {{ tag["name"] }}
{% endfor %}
{% endfor %}