Forum Discussion

neskiz's avatar
neskiz
Regular Visitor
1 year ago
Solved

Cortex XDR Query API into power BI

Good afternoon and hope I can get some help on this. I am looking to connect Power BI to Cortex API to pull in data for reporting. Cortex has documentation showing that you can use the Start an XQL q...
  • ZhangKun's avatar
    1 year ago

    You can't call "Get XQL Query Results Stream API" directly.

     

    Pay attention to this part of the document.

    Running XQL Query APIs 

     

    Run the following APIs to call an XQL query:

    • Start an XQL Query—Run an XQL query. Response returns a unique execution ID used to retrieve the results by the Get XQL Query Results API.
    • Get XQL Query Results—Retrieve XQL query results. API displays up to 1,000 results. If query generated more than 1,000 results, the response returns a unique stream ID used to retrieve additional results by the Get XQL Query Results Stream API.
    • Get XQL Query Results Stream—Retrieve XQL query with more than 1,000 results.