divide

Cortex XDR XQL divide() function divides two integers.

Synopsis

divide (
<string>
|
<integer>
,
<string>
|
<integer>
)

Description

The
multiply()
function divides two positive integers. Parameters may be either integer literals, or integers as a string type such as might be contained in a data field. For example:
dataset = xdr_data | alter mynum = divide(action_file_size, 3) | fields action_file_size, mynum | filter action_file_size > 3 | limit 1

Recommended For You