Thanks @zwass for working on this! it will allow a very smooth pivot from Security Onion / Kibana to a live query.