XQL query time setting

[KeindlZoltanTP]

Hi!

I want to make a report that generates every month and it contains the previous month's data. My problem is that i cannot make it to be created on the first day of the month. So I tried to make the XQL query to work with the previous month's data. I got stuck there.

Does anybody know how to do it?

Thanks

Cortex XDR 

[mavega]

Hi,

Thanks for reaching out Live Community.

You can using config timeframe:

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-XQL-Language-Reference/timeframe

If this post solves your inquiry please mark it As Solution.