radql_query_builder
Build RadQL queries programmatically from structured conditions to construct complex filter or stats queries for security data analysis in Kubernetes and cloud environments.
Instructions
Helper tool to build RadQL queries programmatically from structured conditions. Useful when you need to construct complex filter or stats queries from structured inputs.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| data_type | Yes | The data type to build a query for | |
| conditions | No | Filter conditions to combine into a RadQL query | |
| logic | No | Logical operator to combine conditions | AND |
| aggregation | No | Aggregation function to apply | |
| aggregate_field | No | Field to aggregate (omit for count(*)) | |
| group_by | No | Fields to group by | |
| time_group | No | Time-based grouping interval for datetime fields |