IBM QRadar: Ariel Query Language (AQL)
Ariel Query Language (AQL)
- Use Ariel Query Language (AQL) to extract, filter, and perform actions on event and flow data
- Funções para transformação, agregação da AQL
ariel_query command line
ariel_query --no-verify -u admin --output table --query "select QIDNAME(QID) from EVENTS limit 10"