WebApr 11, 2024 · 1 Answer Sorted by: 2 If you execute an AQL search via the API to get the events associated with the offense you can directly specify which fields of the events you want to get in the results. Example AQL WebQRadar Analyst Workflow provides new methods for filteringoffenses and events, and graphical representations of offenses, bymagnitude, assignee, and type. The improved …

AQL data retrieval functions - IBM

WebAQL for active offense count. Hi, I am trying to find an AQL that shows me how many active offenses I have at that moment. I wanna use active offense count in a report. I am able to find how many offense closed for last 7 day and how many is created but I am not close to find a way to get active offense count. WebQRadar Analyst Workflow provides new methods for filtering offenses and events, and graphical representations of offenses, by magnitude, assignee, and type. The improved … tom jump up

QRadar Analyst Workflow - TechLibrary - Juniper Networks

WebQRadar uses the Ariel Query Language (AQL) to search for offenses or events based on query parameters. The output contains a non-dictionary value. operation: Get Offense Closing Reasons Input parameters None Output The JSON output contains a list of closing reasons associated with all offenses retrieved from the QRadar server. WebTo use AQL in the search fields, consider the following functions: 10 IBM QRadar : Ariel Query Language Guide • In the search fields on the Log Activity or Network Activity tabs, type Ctrl + Space to see the full list of AQL functions, fields, and keywords. WebQRadar Cortex XSOAR Cyble Threat Intel CyCognito CyCognito Feed Cyjax Feed Cylance Protect v2 Cymptom Cymulate Cymulate v2 Cyren Inbox Security Cyren Threat InDepth Threat Intelligence Feed Cyware Threat Intelligence eXchange Darktrace DB2 DeCYFIR Deep Instinct DeepInstinct v3 DeepL DeHashed DelineaDSV DelineaSS Dell Secureworks … tom junior