Manage scheduled queries - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Pro Administrator Guide

Product
Cortex XDR
License
Pro
Creation date
2024-05-06
Last date published
2024-07-17
Category
Administrator Guide
Abstract

Learn how to manage your scheduled and recurring queries.

The Scheduled Queries page displays information about your scheduled and recurring queries. From this page, you can edit scheduled query parameters, view previous executions, disable, and remove scheduled queries. Right-click a query to see the available options.

  1. Select InvestigationScheduled Queries.

  2. Locate the scheduled query for which you want to view previous executions.

    If necessary, use the Filter to reduce the number of queries returned.

  3. Right-click anywhere in the query row, and select Show executed queries.

    Cortex XDR filters the queries on the Query Center.

  1. Select InvestigationScheduled Queries.

  2. Locate the scheduled query that you want to edit.

    If necessary, use the Filter to reduce the number of queries returned.

  3. Right-click anywhere in the query row and then select Edit.

  4. Adjust the schedule settings, and then click OK.