IBM QRadar: Ariel Query Language (AQL)

From Wiki

Ariel Query Language (AQL)

Use Ariel Query Language (AQL) to extract, filter, and perform actions on event and flow data
Funções para transformação, agregação da AQL


ariel_query command line

ariel_query --no-verify -u admin --output table --query "select QIDNAME(QID) from EVENTS limit 10"

Ver também

Retrieved from "https://ebasso.net/wiki/index.php?title=IBM_QRadar:_Ariel_Query_Language_(AQL)&oldid=9254"