Manage Scheduled Queries
From the Cortex XDR management console, you can view
and manage the currently defined scheduled queries.
From the
Scheduled
Queries
page, you can perform additional actions to
manage your scheduled and reoccurring queries. 
View Completed Queries
To
view completed queries:
- Select .
- Locate the scheduled query for which you want to view previous executions.If necessary, use theFilterto reduce the number of queriesCortexXDRdisplays.
- Right-click anywhere in the query row, selectShow executed queries, and choose whether to open the query in the same tab or a new tab.CortexXDRfilters the queries on theQuery Centerand displays the results in a new window.
Edit the Query Frequency
- Select .
- Locate the scheduled query that you want to edit.If necessary, use theFilterto reduce the number of queriesCortexXDRdisplays.
- Right click anywhere in the query row and then selectEdit.
- Adjust the schedule settings as needed, and then clickOK.
Disable or Remove a Query
If you no longer need a query you
can temporarily disable or permanently remove it.
- Select .
- Locate the scheduled query that you want to change.If necessary, use theFilterto reduce the number of queriesCortexXDRdisplays.
- Right click anywhere in the query row and then selectRemoveto permanently remove the scheduled query, orDisableto temporarily stop the query from running at the scheduled time. If you disable a query you can later return to theScheduled Queriespage andEnableit.
Rename a Scheduled Query
- Select .
- Locate the scheduled query that you want to change.If necessary, use theFilterto reduce the number of queriesCortexXDRdisplays.
- Right click anywhere in the query row and then selectRename.
- Edit the query name as desired, and then clickOK.
