company logo
KNOWLEDGE BASE
  • Visit dnif.it
  • Go to Customer Portal
ANALYZE IN STYLE
  • START YOUR TRIAL
  • CONNECTORS
    • Supported connectors
  • ANALYZE IN STYLE
    • PIPES
    • FUNCTIONS
    • DQL (LEGACY)
  • DATA INGESTION
    • EXTRACTORS
    • ENRICHMENT
    • ENRICHMENT EXAMPLES
  • BILLING
  • SECURITY MONITORING
    • INVESTIGATE SIGNALS
    • MANAGING CASES
  • OPERATIONS
  • MANAGE DASHBOARDS
  • MANAGE REPORTS
  • HUNTING WITH WORKBOOKS
    • VISUALIZATION
  • DEVICE INTEGRATION
    • CISCO
    • FORTINET
    • MICROSOFT
    • SYMANTEC
  • MANAGE USERS AND ACCESS
  • MANAGING YOUR COMPONENTS
    • PICO
  • GETTING STARTED
  • INSTALLATION
  • SOLUTION DESIGN
  • AUTOMATION
    • SUPPORTED AUTOMATION
    • SUPPORTED AUTOMATION - SSH
  • TROUBLESHOOTING AND DEBUGGING
    • TROUBLESHOOTING CONNECTORS
  • LICENSE MANAGEMENT
  • RELEASE NOTES
  • API
  • POLICIES
  • SECURITY BULLETINS
      Back to home
      1. KNOWLEDGE BASE
      2. ANALYZE IN STYLE
      • START YOUR TRIAL
      • CONNECTORS
        • Supported connectors
      • ANALYZE IN STYLE
        • PIPES
        • FUNCTIONS
        • DQL (LEGACY)
      • DATA INGESTION
        • EXTRACTORS
        • ENRICHMENT
        • ENRICHMENT EXAMPLES
      • BILLING
      • SECURITY MONITORING
        • INVESTIGATE SIGNALS
        • MANAGING CASES
      • OPERATIONS
      • MANAGE DASHBOARDS
      • MANAGE REPORTS
      • HUNTING WITH WORKBOOKS
        • VISUALIZATION
      • DEVICE INTEGRATION
        • CISCO
        • FORTINET
        • MICROSOFT
        • SYMANTEC
      • MANAGE USERS AND ACCESS
      • MANAGING YOUR COMPONENTS
        • PICO
      • GETTING STARTED
      • INSTALLATION
      • SOLUTION DESIGN
      • AUTOMATION
        • SUPPORTED AUTOMATION
        • SUPPORTED AUTOMATION - SSH
      • TROUBLESHOOTING AND DEBUGGING
        • TROUBLESHOOTING CONNECTORS
      • LICENSE MANAGEMENT
      • RELEASE NOTES
      • API
      • POLICIES
      • SECURITY BULLETINS

      ANALYZE IN STYLE

      Work with events data, look and find using these tools and techniques.
      • DQL - Right from the start
      • Basic Syntax
      • Schema on Read
      • DQL Cheat Sheet

      PIPES

      • Duration
      • Having Clause
      • Timeslice
      • Last
      • First
      • Limit
      • Groupby
      • Select
      See more

      FUNCTIONS

      • Count_if
      • Distinct_count
      • Length
      • Avg
      • Min
      • Max
      • Sum
      • Not Clause
      • Regex Match
      • Distinct
      • Wildcard
      • Percentage_of
      • Ratio_of
      See more

      DQL (LEGACY)

      • _checkif
      • Schema on Read (Legacy)
      • _trigger
      • _lookup
      • _retrieve
      • _store
      • _export
      • _limit
      • _agg
      • _fetch
      • _sort
      See more
      company logo
      dnif.it Help Center
      • Visit dnif.it
      • Go to Customer Portal