QuestionQ61Verified/Search and Investigation ToolsCopy linkReport a problemAsk AstroTutorSave questionWhere can you locate information about the key data fields used in an advanced search query?AIn the Lookup Files sectionBVia the Support PortalCVia the Falcon console docsDIn the Crowdstrike Open Source Events ReferenceShow AnswerAnswerExplanationThe Falcon console documentation provides the searchable-event reference/data dictionary needed to identify event fields and use them correctly in advanced search queries. CrowdStrike’s documentation describes query properties as the data elements used to filter, select, and sort records.Learn moreFalcon Query LanguageShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion