PCDRA · Question #54
What contains a logical schema in an XQL query?
The correct answer is C. Dataset. In an XQL query, the dataset defines the logical schema, specifying the types of data that can be queried and the fields available within that data.
Question
What contains a logical schema in an XQL query?
Options
- AField
- BBin
- CDataset
- DArrayexpand
How the community answered
(18 responses)- A6% (1)
- C89% (16)
- D6% (1)
Why each option
In an XQL query, the dataset defines the logical schema, specifying the types of data that can be queried and the fields available within that data.
A field is an individual attribute within a dataset, not the container for the entire logical schema.
'Bin' is an aggregation function used in XQL to group data into time intervals or numerical ranges, not a schema container.
A dataset in XQL represents a collection of similar events or entities and contains the logical schema, which defines the fields, their data types, and how the data is structured for querying. For example, 'alert' or 'xdr_raw_events' are datasets that provide a specific schema for their respective data.
'Arrayexpand' is an XQL function used to expand array fields into separate records, which is a data manipulation operation, not a schema definition.
Concept tested: XQL query structure and datasets
Source: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/XQL-Queries
Topics
Community Discussion
No community discussion yet for this question.