cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Who rated this post

L5 Sessionator

Hi @VenuK 

 

Thank you for wiritng to live community!

 

The endpoints dataset for XQL gives us the details on Linux operation mode.

 

Hence if you query by the following:

dataset=endpoints
| filter platform = ENUM.LINUX
| fields endpoint_name, endpoint_status, Linux_operation_mode

 

You can add more fields as per your choice

 

Hope this helps!

 

 

 

 

Who rated this post