length

Cortex XDR XQL length function returns the number of characters contained in a string.

Synopsis

length (<string>)

The

length()

function returns the number of characters contained in a string.

Show domain names that are more than 100 characters in length.

dataset = xdr_data 
| fields dns_query_name 
| filter length(dns_query_name) > 100 
| limit 10