Get started with XQL - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Documentation

Product
Cortex XDR
Creation date
2024-03-06
Last date published
2025-03-14
Category
Administrator Guide
Abstract

XQL is the Palo Alto Networks Cortex Query Language used in Cortex XDR.

XQL is the Cortex Query Language. It allows you to form complex queries against data stored in Cortex XDR. This section introduces XQL, and it provides reference information on the various stages, functions, and aggregates that XQL supports.