to_boolean - Reference Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM XQL Language Reference

Product
Cortex XSIAM
Creation date
2023-10-30
Last date published
2024-03-27
Category
Reference Guide
Abstract

Learn more about the Cortex Query Language to_boolean() function that converts a string to a boolean.

Syntax

to_boolean(<string>)

Description

The to_boolean() function converts a string that represents a boolean to a boolean value.

The input value to this string must be either TRUE or FALSE, case insensitive.