Qradar expiring whitelist
Use AQL filter query
username LIKE 'testUser' and LONG(DATEFORMAT(starttime, 'yyyyMMdd')) < 20190429
Revision #1
Created 2019-04-29 10:50:06 UTC by Clinton
Updated 2022-03-17 15:55:28 UTC by Clinton