The following table lists all available XQL pipeline stages:
| Stage | Description |
| --------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------ |
| [`alter`](alter) | Manipulate data by changing existing field values or creating new fields |
| [`arrayexpand`](arrayexpand) | Expand an array field into multiple rows |
| [`bin`](bin) | Group numeric values into bins |
| [`call`](call) | Call a saved XQL query |
| [`comp`](comp) | Aggregate data using grouping and aggregate functions |
| [`config`](config) | Configure query settings |
| [`dataset`](dataset) | Specify the dataset to query |
| [`dedup`](dedup) | Remove duplicate rows |
| [`fields`](fields) | Select or exclude specific fields |
| [`filter`](filter) | Filter rows based on a condition |
| [`iploc`](iploc) | Enrich IP addresses with geolocation data |
| [`join`](join) | Join two datasets |
| [`limit`](limit) | Limit the number of rows returned |
| [`pivot`](pivot) | Rotate row-level data into columns using aggregate functions |
| [`preset`](presets) | Apply preset configurations |
| [`replacenull`](replacenull) | Replace null values with a specified value |
| [`search`](search) | Search for records matching a text query |
| [`sort`](sort) | Sort rows by one or more fields |
| [`tag`](tag) | Add tags to query results |
| [`target`](target) | Specify the target output for query results |
| [`top`](top) | Return the top N rows by a specified field |
| [`transaction`](transaction) | Group events into transactions |
| [`transpose`](https://github.com/jrosenpanw/doc_a/blob/main/Cortex_XQL_Command_Reference/Q4/transpose.md) | Transpose rows into columns |
| [`union`](union) | Combine the results of two or more queries |
| [`view`](view) | Query a saved view |
| [`windowcomp`](windowcomp) | Perform analytic (window) functions over a defined window of rows without collapsing the dataset |
| Stage | Description |
| --------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------ |
| [`alter`](alter) | Manipulate data by changing existing field values or creating new fields |
| [`arrayexpand`](arrayexpand) | Expand an array field into multiple rows |
| [`bin`](bin) | Group numeric values into bins |
| [`call`](call) | Call a saved XQL query |
| [`comp`](comp) | Aggregate data using grouping and aggregate functions |
| [`config`](config) | Configure query settings |
| [`dataset`](dataset) | Specify the dataset to query |
| [`dedup`](dedup) | Remove duplicate rows |
| [`fields`](fields) | Select or exclude specific fields |
| [`filter`](filter) | Filter rows based on a condition |
| [`iploc`](iploc) | Enrich IP addresses with geolocation data |
| [`join`](join) | Join two datasets |
| [`limit`](limit) | Limit the number of rows returned |
| [`pivot`](pivot) | Rotate row-level data into columns using aggregate functions |
| [`preset`](presets) | Apply preset configurations |
| [`replacenull`](replacenull) | Replace null values with a specified value |
| [`search`](search) | Perform free-text searches across ingested data |
| [`sort`](sort) | Sort rows by one or more fields |
| [`tag`](tag) | Add tags to query results |
| [`target`](target) | Specify the target output for query results |
| [`top`](top) | Return the top N rows by a specified field |
| [`transaction`](transaction) | Group events into transactions |
| [`transpose`](https://github.com/jrosenpanw/doc_a/blob/main/Cortex_XQL_Command_Reference/Q4/transpose.md) | Transpose rows into columns |
| [`union`](union) | Combine the results of two or more queries |
| [`view`](view) | Query a saved view |
| [`windowcomp`](windowcomp) | Perform analytic (window) functions over a defined window of rows without collapsing the dataset |