Home
EN
Location
Documentation Home
Palo Alto Networks
Support
Live Community
Knowledge Base
MENU
Home
Cortex
Cortex XDR
Cortex XDR™ XQL Language Reference
XQL Functions Reference
Document:
Cortex XDR™ XQL Language Reference
XQL Functions Reference
Download PDF
Last Updated:
Mon Feb 01 11:20:48 PST 2021
Previous
Next
XQL Functions Reference
The functions that can be used with Cortex XDR XQL stages are described here.
The functions that can be used with an XQL
filter
and/or
alter
stage are:
add
arrayconcat
arraydistinct
arrayindex
array_length
arraymap
arrayrange
arraystring
coalesce
concat
current_time
divide
extract_time
floor
if
incidr
incidrlist
json_extract
json_extract_array
json_extract_scalar
length
lowercase
multiply
pow
replace
regextract
replace
replex
round
split
string_count
subtract
timestamp_diff
timestamp_seconds
to_boolean
to_float
to_integer
to_json_string
to_number
to_string
to_timestamp
trim
uppercase
Previous
Next
Recommended For You
Recommended Videos
Recommended videos not found.
