Possible to View the XQL Query of Widgets?

[PA_nts]

Hi All,

So XSIAM has a bunch of built in widgets and I want to amend some of these.. is there a way to determine the Query used within so that i can use this to adapt to my custom query?

thanks in adv

[A.Elzedy]

Hi @PA_nts ,

Unfortunately, you can't directly access or modify the queries used in XSIAM's predefined/built-in widgets. These were made by Palo Alto and aren't exposed for customization.

However, you may be able to replicate some of these widgets by creating custom ones, though keep in mind that not all backend data sources are accessible through XQL. For example, threat intelligence data and some other internal data sources aren't available for custom queries.