array_length

Cortex XDR XQL array_length() function returns the length of an array.

Synopsis

array_length (
<array>
)

Description

The
array_length()
function returns the number of elements in an array. For example:
dataset = xdr_data | fields action_local_ip as alii | alter ip_len = array_length(split(alii, ".")) | filter alii != null and alii != "0.0.0.0" | limit 1

Recommended For You