The team at LimaCharlie is excited to be introducing a new and powerful capability: LimaCharlie Query Language (LCQL).

LCQL allows you to query through your data in the LimaCharlie retention more easily and flexibly. It also enables several new useful features:

• Dryrun mode to get estimates of data being queried.
• Paged queries, so querying for data over a long period of time is not all done at once, giving you the opportunities to get results without incuring the cost of the full query.
• Event name and event element tab-completion. You don't have to remember the event names or paths to all the elements you want to query.
• Querying, projection (only report specific values from matching elements) and aggregation (count, count_unique).
• Display underlying D&R rules generated for the query, making it easier to use LCQL to prototype D&R rules.

If you’d like to learn more about how you can use LimaCharlie Query Language to give you the ability to operationalize your historical telemetry more easily:
Schedule a call with our security engineers: https://info.limacharlie.io/meetings/jessica-crytzer/demo
Get started for free: https://app.limacharlie.io/signup
LCQL documentation: https://doc.limacharlie.io/docs/documentation/b0915c7a5f598-lima-charlie-query-language