topic Re: Can't find references from training video in Cortex XDR Discussions

Can't find references from training video

ptrivino1 — Sat, 14 Jun 2025 02:36:14 GMT

In the "Cortex XDR Basic XQL Crash Course" found here LIVEcommunity - Cortex XDR How-to Videos - LIVEcommunity, they reference two reference documents. I have searched everywhere I can think to search but I find nothing. Does anyone know where I can find

Cortex XDR XQL Language Reference
Cortex XDR XQL Schema Reference

Thanks for any help.

Paul

Re: Can't find references from training video

A.Elzedy — Sun, 15 Jun 2025 23:44:05 GMT

Hi @ptrivino1,

There aren’t many public video-based trainings yet, but these should help:

Cortex XDR XQL Language Reference
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Get-started-with-XQL
Cortex XDR XQL Schema Reference (xdr_data dataset)
https://docs-cortex.paloaltonetworks.com/r/Cortex-XQL-Schema-Reference-Guide/XDR_DATA-Fields
Quick summary on GitHub
https://github.com/Abdalla-Elzedy/Cortex-XIAM/blob/main/xql_query_guide.md

Hope that helps!

Re: Can't find references from training video

ptrivino1 — Tue, 17 Jun 2025 02:50:47 GMT

Thanks for the links. The second one is about what I'd expect for a schema reference (aside from appearing to only be for the xdr_data dataset). But I was expecting the Language reference to be a stage-by-stage reference.

But OK if those docs no longer exist, this will be very helpful. Thanks again.

Paul