CCSE: CrowdStrike Certified SIEM Engineer

By CrowdStrike · Question Mode

QuestionQ7

VerifiedCQL Querying and Data Analysis

You are building a dashboard that displays inbound network connections. You want users to filter the source IP address with a dashboard parameter, giving them the option to enter the IP address to filter by or choose from a list of IPs present in the data.

Which type of parameter would you use?

Explanation

A query-based parameter dynamically populates its available values by running a KQL query against the data, making it suitable for presenting source IP addresses found in inbound network connections. Free-text parameters do not provide a populated data-derived list, and fixed-value parameters require manually specified static values.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!