You want to search for the terms user "ladron" from 192.0.2.0/24 in these events. To search for these terms you can use a search literal. With a search literal, an AND condition is implied between each of the terms. Internally the search becomes user AND "ladron" AND from AND 192.0.2.0/24