Get Started with XQL - Reference Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR XQL Language Reference

Product
Cortex XDR
Creation date
2023-10-31
Last date published
2024-03-27
Category
Reference Guide
Abstract

XQL is the Palo Alto Networks Cortex Query Language used in Cortex XDR.

XQL is the Cortex Query Language. It allows you to form complex queries against data stored in Cortex XDR. This document introduces XQL, and it provides reference information on the various stages, functions, and aggregates that XQL supports.