Master the CrowdStrike Query Language
Learn CQL structure and fundamentals to build powerful queries.
Run your first queries and discover how to search your data.
Built-in functions for data analysis, transformation, and aggregation.
Extract and filter specific fields from your event data.
Filter and refine results to find exactly what you need in your data.
Event-based search techniques to query structured and unstructured data.
Comparison operators, logical operators, and mathematical operations.
Pattern matching with regex for advanced text search and extraction.
Practical guide to writing effective queries and managing query structure.
Analyze event sequences and patterns.
Summarize and group data with aggregations.
Pattern matching and event correlation based on proximity and sequences.
Complete reference of CQL functions.
Combined views of multiple widgets for comprehensive monitoring.
Learn how to structure queries for best performance. Understand filter placement, function ordering, and optimization techniques to reduce query execution time and improve efficiency.
Debug and resolve common query issues. Learn techniques for identifying performance bottlenecks, fixing syntax errors, understanding error messages, and optimizing slow queries.
Essential queries for security analysts investigating threats, detecting anomalies, and monitoring security events. Includes authentication analysis, threat hunting, and incident response queries.
Essential queries for infrastructure monitoring, system administration, and operational tasks. Includes resource usage, service health checks, and capacity monitoring queries.
Essential queries for infrastructure monitoring, data ingestion tracking, and event processing. Includes parser alerts, ingest queue monitoring, and platform health queries.
Essential queries for application monitoring, performance analysis, and troubleshooting. Includes error tracking, latency analysis, and deployment monitoring queries.
Essential queries for application performance monitoring, trend detection, and reliability analysis. Includes response time percentiles, sliding window analysis, and pattern detection queries.
Essential queries for infrastructure reliability, system health monitoring, and capacity planning. Includes resource optimization, scaling decisions, and infrastructure incident management queries.
Essential queries for infrastructure monitoring, system administration, and operational tasks. Includes resource usage, service health checks, and capacity monitoring queries.
