string_count

Cortex XDR XQL string_count() function returns the number of times a substring appears in a string.

Synopsis

string_count (<
string
>, <
pattern
>)

Description

The
string_count()
function returns the number of times a substring appears in a string. For example:
dataset = xdr_data | fields actor_primary_username as apu | filter string_count(apu, "e") > 1

Recommended For You