Get Started with XQL - Reference Guide - Cortex XDR - Cortex XSIAM - Cortex - Security Operations

Cortex XDR XQL Language Reference

Product
Cortex XDR
Creation date
2022-12-12
Last date published
2023-03-19

XQL is the Cortex Query Language. It allows you to form complex queries against data stored in Cortex XDR. This document introduces XQL, and it provides reference information on the various stages, functions, and aggregates that XQL supports.