Get started with XQL - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Documentation

Product
Cortex XSIAM
Creation date
2024-03-06
Last date published
2025-01-20
Category
Administrator Guide
Abstract

XQL is the Palo Alto Networks Cortex Query Language used in Cortex XSIAM.

XQL is the Cortex Query Language. It allows you to form complex queries against data stored in Cortex XSIAM. This section introduces XQL, and it provides reference information on the various stages, functions, and aggregates that XQL supports.