topic Re: CDL Syntax Query. in General Topics

CDL Syntax Query.

Gareth.Doyle — Thu, 27 May 2021 01:05:08 GMT

From what I can tell, CDLs syntax is extremely limited compared to that of Panorama. Does anyone think differently? Any tips/tricks you can share for more in depth queries?

For example:

excluding multiple IP ranges;

limiting the search one user, but including multiple apps/destinations with an OR.

Essentially anything you would use parenthesis for in Panorama seem like you cannot do in CDL.

Re: CDL Syntax Query.

BPry — Thu, 27 May 2021 01:27:13 GMT

@Gareth.Doyle,

You can manually add parenthesis into the CDL query and it process at least how I would expect.

Re: CDL Syntax Query.

Gareth.Doyle — Tue, 01 Jun 2021 19:57:13 GMT

@BPry that hasn't been my experience with it unfortunately. It seems very limited.