topic XQL query to retrive endpoint data from data lake in Cortex XDR Discussions https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xql-query-to-retrive-endpoint-data-from-data-lake/m-p/555623#M5049 <P>Can anyone help me how to retrive endpoint logs from data lake via XQL&nbsp;</P> Thu, 18 Apr 2024 18:36:57 GMT Sanath_Suvarna 2024-04-18T18:36:57Z XQL query to retrive endpoint data from data lake https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xql-query-to-retrive-endpoint-data-from-data-lake/m-p/555623#M5049 <P>Can anyone help me how to retrive endpoint logs from data lake via XQL&nbsp;</P> Thu, 18 Apr 2024 18:36:57 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xql-query-to-retrive-endpoint-data-from-data-lake/m-p/555623#M5049 Sanath_Suvarna 2024-04-18T18:36:57Z Re: XQL query to retrive endpoint data from data lake https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xql-query-to-retrive-endpoint-data-from-data-lake/m-p/555638#M5050 <P>Hello Sanath,</P> <P>&nbsp;</P> <P>Can you confirm which Endpoints log you are looking for? Is it Agent logs or Windows Events logs?</P> Tue, 29 Aug 2023 08:33:44 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xql-query-to-retrive-endpoint-data-from-data-lake/m-p/555638#M5050 aspatil 2023-08-29T08:33:44Z