Palo_Alto_Networks
XDR-ANALYST · Question #60
What occurs if a lookup table referenced in an XQL query is deleted from Cortex XDR?
The correct answer is C. The query fails during execution. If a referenced lookup table no longer exists, Cortex XDR cannot resolve the query logic, causing the XQL query to fail during execution.
XQL and Query Investigation
Question
What occurs if a lookup table referenced in an XQL query is deleted from Cortex XDR?
Options
- AThe query silently skips that reference
- BCortex XDR raises an alert and substitutes a default table
- CThe query fails during execution
- DLookup values are cached from the previous run
How the community answered
(34 responses)- A3% (1)
- B6% (2)
- C76% (26)
- D15% (5)
Explanation
If a referenced lookup table no longer exists, Cortex XDR cannot resolve the query logic, causing the XQL query to fail during execution.
Topics
#XQL queries#lookup tables#query execution#Cortex XDR
Community Discussion
No community discussion yet for this question.