Using XQL queries in XSIAM playbooks

[Hisashi_Abe]

Hi Team,

I'd like to enquire whether Cortex XSIAM can search the logs of a dataset using XQL Query in a Playbook.
Cortex XSOAR can do that for Cortex XDR using the integration of "Cortex XDR - Search and Compare Process Executions - XQL Engine" .

[MDovirak · Accepted solution]

In the recent update for the pack Incident & Response released scripts that allow you to call XQL queries. Should be similar to the XSOAR functionality. 
XQL used Compute unites.