median - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Documentation

Product
Cortex XDR
Creation date
2024-03-06
Last date published
2024-10-01
Category
Administrator Guide
Abstract

Learn more about the Cortex Query Language median function used with both comp and windowcomp stages.

Syntax
Description

The median() function is used to return the median value of a field over a group of rows. The function syntax and application is based on the preceding stage:

Examples