For the complete documentation index, see llms.txt. This page is also available as Markdown.

Get started with XQL queries

Get started creating and running XQL queries.

Before you begin running XQL queries, consider the following information:

  • Use the interface to help you build queries

    Cortex Cloud offers features in the XQL search interface to help you build queries. For more information, see Useful XQL user interface features.

  • Understand query defaults and limitations

    Before you run a query, review this list to better understand query behavior and results. For more information, see Expected results when querying fields.

  • Translate Splunk queries to XQL

    If you have existing Splunk queries, you can translate them to XQL. For more information, see Translate to XQL.

Last updated

Was this helpful?