Building search queries

Build custom queries to get specific results so that you find information that is relevant to you. Use the query builder in Data Explorer to create STIX-compliant queries to your connected data sources.

When you configure IBM® QRadar as a data source, you can create Ariel Query Language (AQL) queries. When you configure IBM Security QRadar® Log Insights, you can also use the Kusto Query Language (KQL) to query the QRadar data lake. You can use both the STIX and KQL to query the QRadar data lake. Ariel Query Language (AQL) can query only the QRadar data sources.