Back to feed
New: cross joins in multi-stage queries
New: cross joins in multi-stage queries
You can now use cross joins in YARA-L 2.0 multi-stage queries let you compare individual UDM event data against aggregated statistics calculated in previous YARA-L stages. They are supported in:
• Search • Dashboards
For more information, see Cross joins in multi-stage queries.