Scheduled Queries - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Pro Administrator Guide

Product
Cortex XDR
License
Pro
Creation date
2023-03-22
Last date published
2023-09-25
Category
Administrator Guide

From the Scheduled Queries page, you can easily view all scheduled and reoccurring queries created from the Query Builder. The Scheduled Queries page displays information about the query including the query parameters and allows you to adjust or modify the schedule as needed. To edit a query schedule, right-click the query and select the desired action.

The following table describes the fields that are available for each query in alphabetical order.

Field

Description

CREATED BY

User who created or scheduled the query.

NEXT EXECUTION

Next execution time if the query is scheduled to run at a specific frequency. If the query was only scheduled to run at a specific time and date, this field will show None.

QUERY DESCRIPTION

The query parameters used to run the query.

QUERY ID

Unique identifier of the query.

QUERY NAME

For saved queries, the Query Name identifies the query specified by the administrator. For scheduled queries, the Query Name identifies the auto-generated name of the parent query. Scheduled queries also display an icon to the left of the name to indicate that the query is reoccurring.

query-scheduled.png

SCHEDULE TIME

Frequency or time at which the query was scheduled to run.

TIMESTAMP

Date and time the query was created.