// Get browser extension event #event_simpleName=InstalledBrowserExtension BrowserExtensionId!="no-extension-available" // Aggregate by event_platform, BrowserName, ExtensionID and ExtensionName | groupBy([event_platform, BrowserName, BrowserExtensionId, BrowserExtensionName], function=([count(aid, distinct=true, as=TotalEndpoints)])) // Check to see if the extension is installed on fewer than 50 systems | test(TotalEndpoints<50) // Create a link to the Chrome Extension Store | format("[See Extension](https://chromewebstore.google.com/detail/%s)", field=[BrowserExtensionId], as="Chrome Store Link") // Sort in descending order | sort(order=desc, TotalEndpoints, limit=1000) // Convert the browser name from decimal to human-readable | case{ in(BrowserName, values=["1","9"]) | BrowserName:="Firefox"; BrowserName="2" | BrowserName:="Safari"; BrowserName="3" | BrowserName:="Chrome"; BrowserName="4" | BrowserName:="Edge"; *; }