How to write RQL to check the log activity/operations with respect any host name of the resource??

[MPalagiri]

Is there a way to write RQL to check the traffic towards that resource/to know the operations/activity details with respect to particular resource host name?In the circumstances where we are not aware of the cloud type??and if can't atleast with cloud type details?

Ex:-event where ip in (x.x.x.x) similar to this can we give with respect to resource?

Expected would somebody might be helped me on this request??

[MPalagiri]

I have tried like this but not getting any thing though query might correct.

config where api.name = 'azure-resource-group' AND json.rule = name contains 'XXXXXXX'