> ## Documentation Index
> Fetch the complete documentation index at: https://docs.levelblue.com/llms.txt
> Use this file to discover all available pages before exploring further.

# USM Anywhere Advanced Query

USM Anywhere supports advanced query capabilities, enabling you to write custom searches using Structured Query Language (SQL) or Piped Processing Language (PPL) syntax. Compared to traditional filters or orchestration rules, this feature provides more flexibility and precision; thereby, helping to uncover insights that may not be visible in standard dashboards.

Key capabilities of Advanced Query include:

* **Custom Queries**: Perform targeted searches across events, alarms, vulnerabilities, and more.
* **Saved Queries**: Store and reuse queries for future investigations.
* **Flexible Output**: View results in the USM Anywhere interface, or export them as CSV files for offline analysis.
* **Scheduled Execution**: Run queries automatically on a recurring schedule. The output can be sent via email.

This enhancement gives you greater control over your data as it streamlines threat detection, reporting, and investigation workflows.

This topic discusses the following:

* [Submitting a custom query](/documentation/usm-anywhere/user-guide/advanced-query/submit-custom-query)
* [SQL Queries](/documentation/usm-anywhere/user-guide/advanced-query/sql-queries)
* [PPL Queries](/documentation/usm-anywhere/user-guide/advanced-query/ppl-queries)
* [Favorite a query](/documentation/usm-anywhere/user-guide/advanced-query/favorite-a-query)
* [Saving a query](/documentation/usm-anywhere/user-guide/advanced-query/save-a-query)
* [Generating a CSV report](/documentation/usm-anywhere/user-guide/advanced-query/generate-csv-report)
* [Information to support query writing](/documentation/usm-anywhere/user-guide/advanced-query/support-info-query-writing)
* [List of fields](/documentation/usm-anywhere/user-guide/advanced-query/list-of-fields)