Document:Cortex XDR™ XQL Language Reference

multiply

Search the Table of Contents

copyright
- copyright
Get Started with XQL
Stages Commands Reference
- Alter
- Arrayexpand
- Bin
- Comp
  - avg
  - count
  - count_distinct
  - earliest
  - first
  - last
  - latest
  - list
  - max
  - min
  - sum
  - values
- Config
  - case_sensitive
  - timeframe
- Dedup
- Fields
- Filter
- Join
- Iploc
- Limit
- Replacenull
- Sort
- Target
- Union
- View
XQL Functions Reference
- add
- arrayconcat
- arraycreate
- arraydistinct
- arrayfilter
- arrayindex
- arrayindexof
- array_length
- arraymap
- arraymerge
- arrayrange
- arraystring
- coalesce
- concat
- current_time
- divide
- extract_time
- format_string
- format_timestamp
- floor
- if
- incidr
- incidrlist
- json_extract
- json_extract_array
- json_extract_scalar
- len
- lowercase
- multiply
- object_create
- parse_timestamp
- pow
- regextract
- replace
- replex
- round
- split
- string_count
- subtract
- timestamp_diff
- timestamp_seconds
- to_boolean
- to_float
- to_integer
- to_json_string
- to_number
- to_string
- to_timestamp
- trim
- uppercase

multiply

Cortex XDR XQL multiply() function multiplies two integers.

Synopsis

multiply (<string> | <integer>, <string> | <integer>)

Description

The

multiply()

function multiplies two positive integers. Parameters may be either integer literals, or integers as a string type such as might be contained in a data field. For example:

dataset = xdr_data 
| alter mynum = multiply(action_file_size, 3) 
| fields action_file_size, mynum 
| filter action_file_size > 0 
| limit 1

Document:Cortex XDR™ XQL Language Reference

multiply

Table of Contents

multiply

Synopsis

Description

Recommended For You

Recommended Videos