auto list = context.constraints["source_ip"].getAll(osquery::EQUALS);