SQL to CQL: Filtering with Multiple Conditions

SQL uses WHERE clauses with AND and OR operators for complex filtering. LogScale uses similar boolean operators directly in the filter expression.

SQL CQL
sql
SELECT * FROM events 
WHERE severity = 'high' 
AND (category = 'malware' OR category = 'ransomware') 
AND timestamp > '2026-03-01';
logscale
severity="high" (category="malware" OR category="ransomware") timestamp>"2026-03-01"
| select([*])