SSIM Advanced Query How to ?

Hi all,

i need to create an advacend query for my firewall logs:

i need to retrive the top N Connection dropped and display in the report the IP source Address, the Destination Port and others information of that topn N row ( with default query i can only display 1 field and the counts that is pretty useful for understanding the network traffic!!! ), is it possible with query wizard or advances SQL query? someone has some examples?

another type of query that i need for reports is the Top N Port of dropped connection for the Top 10 Source IP, this query is more complex but dont find any example for it in system template.

Thanks all,

Best Regards!