[Intelmq-dev] usage of extra field made easier