Search ⫘

XDR offers the ability to search nearly any component of ingested data.

Leverage Quick Search to search for single term items against all Data Types.

You can also use the Advanced Search options to search for alerts and events across your tenant:

• The Query Language search interface enables you to craft search queries from scratch using basic syntax, schemas, and operators.
• The Builder search interface allows you to construct searches choosing your operators and defining fields.

The Advanced Search interface you most recently chose is saved as your default preference. Use the button at the top-right of either interface to toggle between them.

Create Reports ⫘

Generate reports in XDR from a search query and configure them to run one time or at a scheduled recurrence. By default, reports output to PDF format, with the option to include a CSV format as well.

Access the following resources to learn more about reporting in XDR:

• Create Reports
• Available Reports
• Completed Reports
• Scheduled Reports
• Archived Reports
• Common Report Queries