topic Re: XQL query time setting in Cortex XDR Discussions

XQL query time setting

KeindlZoltanTP — Wed, 26 Feb 2025 14:08:53 GMT

Hi!

I want to make a report that generates every month and it contains the previous month's data. My problem is that i cannot make it to be created on the first day of the month. So I tried to make the XQL query to work with the previous month's data. I got stuck there.

Does anybody know how to do it?

Thanks

Re: XQL query time setting

mavega — Wed, 26 Feb 2025 18:29:51 GMT

Hi,

Thanks for reaching out Live Community.

You can using config timeframe:

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-XQL-Language-Reference/timeframe

If this post solves your inquiry please mark it As Solution.