len - Administrator Guide - Cortex XDR - Cortex - Security Operations

len (<string>)

The len() function returns the number of characters contained in a string.

Show domain names that are more than 100 characters in length.

dataset = xdr_data 
| fields dns_query_name 
| filter len(dns_query_name) > 100 
| limit 10