case_sensitive

Cortex XDR XQL case_sensitive config causes the query to either be case sensitive or case insensitive.

Synopsis

config case_sensitive = true | false

Description

The
case_sensitive
configuration identifies whether field values are evaluated as case sensitive or case insensitive. If you do not provide this stage on your query, the default behavior is
true
; case is considered when evaluating field values.
The
XQL Configuration
Case Sensitivity (case_sensitive)
setting can overwrite this
case_sensitive
configuration for all fields in the application except for BIOCs, which will remain case insensitive no matter what this setting is set to.

Examples

config case_sensitive = false | dataset = xdr_data | fields actor_process_image_name as apin | filter apin != NULL and apin contains "python" | limit 100

Recommended For You