arraydistinct - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Documentation

Product
Cortex XSIAM
Creation date
2024-03-06
Last date published
2024-10-07
Category
Administrator Guide
Abstract

Learn more about the Cortex Query Language arraydistinct() function that returns an array containing unique values found in the original array.

Syntax
arraydistinct (<array>)
Description

The arraydistinct() function accepts an array, and it returns a new array containing only unique elements found in the original array. That is, given the array:

[0,1,1,1,4,5,5]

This function returns:

[0,1,4,5]