topic Re: Using XQL queries in XSIAM playbooks in Cortex XSIAM Discussions

Using XQL queries in XSIAM playbooks

Hisashi_Abe — Thu, 05 Sep 2024 16:19:33 GMT

Hi Team,

I'd like to enquire whether Cortex XSIAM can search the logs of a dataset using XQL Query in a Playbook.
Cortex XSOAR can do that for Cortex XDR using the integration of "Cortex XDR - Search and Compare Process Executions - XQL Engine" .

Re: Using XQL queries in XSIAM playbooks

MDovirak — Tue, 10 Sep 2024 15:44:27 GMT

In the recent update for the pack Incident & Response released scripts that allow you to call XQL queries. Should be similar to the XSOAR functionality.
XQL used Compute unites.