Palo_Alto_Networks
PCSAE · Question #1
Which two incident search queries are valid? (Choose two.)
The correct answer is A. created:>="7 days" D. status:closed -category:job. https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoar-admin/cortex-xsoar- overview/how-to-search-in-cortex-xsoar.html
Operate and Manage
Question
Which two incident search queries are valid? (Choose two.)
Options
- Acreated:>="7 days"
- Bowner===admin
- Crole is Analyst
- Dstatus:closed -category:job
How the community answered
(41 responses)- A78% (32)
- B15% (6)
- C7% (3)
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoar-admin/cortex-xsoar- overview/how-to-search-in-cortex-xsoar.html
Topics
#incident search#query syntax#log filtering#search operators
Community Discussion
No community discussion yet for this question.