XQL queries on management audit logs

[bjchappell]

Is it possible to XQL query XDR management audit logs? I'd like to create a dashboard to track console events like logins, endpoint isolations, malware scans, etc. 

[aspatil · Accepted solution]

Hello @bjchappell ,

Thank you for writing to live community.

You can use dataset = management_auditing  and create a query as per your requirement.

Hope this helps!

Please mark the response as "Accept as Solution" if it answers your query.