QuestionQ65Verified/Rules and subpatternsCopy linkReport a problemAsk AstroTutorSave questionRefer to the exhibit. Which statement about the nested query displayed in the exhibit is correct?AThe outer query could have also referenced the Protocol field from the inner query.BThe outer query should have used the operator CONTAINS when referencing the inner query.CThe outer query could have also referenced the Reporting IP address field from the inner query.DThe outer query could have referenced all the queried fields from the inner query.Show AnswerAnswerExplanationAn AQL subquery used with the IN clause returns a single column. The outer query can compare its Source IP field with a compatible IP-address column returned by the inner query, including the Reporting IP address field. It cannot use all of the inner query’s fields as the IN result set.Learn moreIBM QRadar AQL subqueryShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion