IBM QRadar: Ariel Query Language (AQL)

From Wiki
Revision as of 19:00, 31 January 2025 by Ebasso (talk | contribs) (→‎Ariel Query Language (AQL))
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Ariel Query Language (AQL)

Use Ariel Query Language (AQL) to extract, filter, and perform actions on event and flow data
Funções para transformação, agregação da AQL


ariel_query command line

ariel_query --no-verify -u admin --output table --query "select QIDNAME(QID) from EVENTS limit 10"

Ver também