Thank you for your answer. I'm aware of that, but that is not solution I'm looking for. I'd like to get an output that I seem only to be able to get directly from the database. Something like:
select count(*),SrcIP,DstIP,DstPort from Alert where id>(select max(id)-10000 from alert) and DstPort>0 group by SrcIP,DstIP,DstPort order by count(*) desc limit 10
gives me the result. Can this be done in GUI?