web_logs question about remote_addr

Problem/Question

When collecting web_logs, everything is working great. The question I have is can we somehow display the $remote_addr in netdata cloud on a graph similar to how we show vhost, and can we implement alerts if we see a specific IP more than X times in 60 seconds?

Relevant docs you followed/actions you took to solve the issue