len - Reference Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR XQL Language Reference

Abstract

Learn more about the Cortex Query Language len function that returns the number of characters contained in a string.

len (<string>)

The len() function returns the number of characters contained in a string.

Show domain names that are more than 100 characters in length.

dataset = xdr_data 
| fields dns_query_name 
| filter len(dns_query_name) > 100 
| limit 10