topic Re: Adding exception for weekend in Cortex XDR Discussions

Adding exception for weekend

S.Javeri — Mon, 07 Jul 2025 08:46:02 GMT

Hey guys, I’m looking to exclude some detections that occurred over the weekends and could use a hand with crafting that query.

My current thought process is to add exceptions for weekend dates, but that would be a continuous task and doesn't seem very efficient in the long run.

Re: Adding exception for weekend

Mudhireddy — Mon, 07 Jul 2025 10:51:53 GMT

// Replace 'xdr_data' with your specific dataset if different
// Replace '_time' with your actual timestamp field if different
xdr_data
| where dayofweek(_time) != 6d // Exclude Saturday
| where dayofweek(_time) != 0d // Exclude Sunday
// Add your other filters here
// | project _time, event_type, action_type

Re: Adding exception for weekend

S.Javeri — Fri, 18 Jul 2025 12:17:54 GMT

Thanks I will test it out