Trying to setup Cortex Data Lake

LorenPeterson — Thu, 18 Apr 2024 19:33:28 GMT

Hi all, I am new to this forum and new to the job where I am having this issue so please forgive me if this is an easy question that has been answered, I could not find the info I was looking for. I am trying to setup a Cortex Data Lake for my Cortex XDR Cloud logging. I am aware that I cannot see anything in the data lake when going to explore. However, my issue is that used space is showing as 0mb of 7tb. I have read many articles and I "think" that everything is setup properly but I can't seem to get any logs flowing in to the data lake. I would greatly appreciate some assistance and I am willing to supply more information as needed I just dont know what to supply at this moment. Thank you!

Re: Trying to setup Cortex Data Lake

eluis — Tue, 21 Sep 2021 07:18:17 GMT

Hi LorenPeterson,

to start with Cortex Data Lake you need to first plan your deployment.

Im gonna give you good resources to start with it, plannify your deployment calculate storage space depending on different log sources you might integrate in CDL. There is also a calculator for the sizing (find the link to it on the 1st document on how to plan your CDL implementation)

Please check the following docs

General info on CDL. I guess that you've already seen this:

https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-cortex-data-lake/overview.html

Plan your CDL deployment (including links to calculator and log integrations):

https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-cortex-data-lake/overview/planning.html#id3b11d56f-6edb-4658-90cc-37ab49a5a0ff

Start sending logs to CDL:

https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-cortex-data-lake/start-sending-logs-to-cortex-data-lake/start-sending-logs-to-cortex-data-lake-individually-managed.html#id9c9e0713-d2b3-4f95-a507-31cf81434a00

Kind Regards and have a good CDL time,

Luis

topic Re: Trying to setup Cortex Data Lake in Cortex XDR Discussions

Trying to setup Cortex Data Lake

Re: Trying to setup Cortex Data Lake