add

Cortex XDR XQL add() function adds two integers.

Synopsis

add (
<string>
|
<integer>
,
<string>
|
<integer>
)

Description

The
add()
function adds two positive integers. Parameters may be either integer literals, or integers as a string type such as might be contained in a data field. For example:
dataset = xdr_data | alter mynum = add(action_file_size, 3) | fields action_file_size, mynum | filter action_file_size > 0 | limit 1

Recommended For You