Skip to content

# Live Query

## Configure Live Query settings

For the first time, when you land this page, you need to configure Live Query Settings.

1. Log on to the Seqrite Endpoint Protection.
2. Go to EDR > Live Query.
3. When you open this page for the first time, as Live Query Settings are not configured, you see the message about configuring Live Query Settings. Click Configure Live Query Settings.
4. You are redirected to the Configurations > EDR page.

## Run Live Query on Seqrite Endpoint Protection console

Before running a live query, ensure the Live Query Server is reachable.
To run a Live Query, follow these steps.

1. Log on to the Seqrite Endpoint Protection.
2. Go to EDR > Live Query.
3. From the Platform list, select Windows,
4. Select a table from the list. There is 100+ auto-suggested tables available on the list. Visit this URL https://www.osquery.io/schema/5.6.0 for more reference.
5. Select the host from the list. This is the endpoint on which you want to run the query.
6. The Query appears in the box. Click Run Query.
7. Within 30 seconds, the result of the query appears. If the query is more complex and unable to resolve within 30 seconds, an error message appears.
8. You can export the query result by using Export as XLS button.
   You can search for a parameter with the Search facility.

Query Limitations

Query execution time : 30 seconds

> Note: Ensure that you add a host entry for the live query server IP and hostname on the endpoint as well as on the Seqrite Endpoint Protection server.

Was this page helpful?
Yes No
Scroll back to top