How to retrieve data from reference list if matching with UDM

Hello All,

I am looking to retrieve data from a Reference List in Chronicle if it matches a UDM value during a stat search query. For example, if my UDM value is username=suraj, I want to query the Reference List and retrieve any entries that match suraj.

Could you guide me on how to achieve this or provide an example of the appropriate query syntax?

 

0 6 403
6 REPLIES 6