Cortex XDR 3.x
divide
Learn more about the Cortex Query Language divide() function that divides two integers.
Syntax
divide (<string> | <integer>, <string> | <integer>)Description
The divide() function divides two positive integers. Parameters can be either integer literals, or integers as a string type, such as might be contained in a data field.
Example
dataset = xdr_data
| alter mynum = divide(action_file_size, 3)
| fields action_file_size, mynum
| filter action_file_size > 3
| limit 1Last updated
Was this helpful?
