Manage scheduled queries - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Documentation

Product
Cortex XSIAM
Creation date
2024-03-06
Last date published
2024-05-22
Category
Administrator Guide
Abstract

Learn how to manage your scheduled and recurring queries.

The Scheduled Queries page displays information about your scheduled and recurring queries. From this page, you can edit scheduled query parameters, view previous executions, disable, and remove scheduled queries. Right-click a query to see the available options.

  1. Select InvestigationScheduled Queries.

  2. Locate the scheduled query for which you want to view previous executions.

    If necessary, use the Filter to reduce the number of queries returned.

  3. Right-click anywhere in the query row, and select Show executed queries.

    Cortex XSIAM filters the queries on the Query Center.

  1. Select InvestigationScheduled Queries.

  2. Locate the scheduled query that you want to edit.

    If necessary, use the Filter to reduce the number of queries returned.

  3. Right-click anywhere in the query row and then select Edit.

  4. Adjust the schedule settings, and then click OK.