This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
Accept
Reject
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

About John_Lodge

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
John_Lodge
‎05-27-2021
since ‎11-17-2020
L0 Member
User Activity
User Profile
Latest posts by John_Lodge
View All
User Badges
Community Statistics
Member Since ‎11-17-2020 03:02 AM
Date Last Visited ‎05-27-2021 02:25 PM
Posts 1

Inconsistent XQL search results

by in Cortex XDR Discussions
‎02-03-2021 05:50 AM
‎02-03-2021 05:50 AM
When carrying out XQL search...."dataset = xdr_data | fields action_country | dedup action_country" I receive a set of results with different action_country values as expected. If I then take one of these values ie Switzerland and run "dataset = xdr_data | fields action_country | filter action_country = SWITZERLAND" I receive expected results. If i run the same search with "dataset = xdr_data | fields action_country | filter action_country = IRAN,_ISLAMIC_REPUBLIC_OF " it will not allow me to run the search, as if the search rule is not complete. Surrounding IRAN_,ISLAMIC REPUBLIC OF in quotes allows me to carry out the search however then returns no results despite results being returned in the first search   ... View more
Register or Sign-in
Contact Me
Online Status
Offline
Date Last Visited
‎05-27-2021 02:25 PM
Latest Tags
No tags yet
LEGAL NOTICES
RESOURCES
Copyright 2007 - 2022 - Palo Alto Networks