arraydistinct - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Documentation

Product
Cortex XDR
Creation date
2024-03-06
Last date published
2024-10-01
Category
Administrator Guide
Abstract

Learn more about the Cortex Query Language arraydistinct() function that returns an array containing unique values found in the original array.

Syntax
arraydistinct (<array>)
Description

The arraydistinct() function accepts an array, and it returns a new array containing only unique elements found in the original array. That is, given the array:

[0,1,1,1,4,5,5]

This function returns:

[0,1,4,5]