https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xdr-analytic-alert/m-p/482493#M1916 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/171682">@RCDT</a>&nbsp;I assume you are referring to the Analytics Alerts referred <A href="https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-analytics-alert-reference/cortex-xdr-analytics-alert-reference" target="_blank">here</A>.</P><P>&nbsp;</P><P>Once you have deployed Cortex XDR on your endpoints, you can enable XDR Analytics by referrring to Step 2- substep 3 <A href="https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/configure-xdr#configure-xdr" target="_blank">here</A>. Please take note that you need</P><P>-&nbsp;2 weeks of EDR data from 30 endpoints deploying XDR Pro and enabling Enhanced Endpoint Data collection (Step 10 substep 2 <A href="https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/endpoint-security/customizable-agent-settings/add-agent-settings-profile" target="_blank">here</A>)</P><P>- Cloud Audit logs for 5 days.&nbsp;&nbsp;</P><P>&nbsp;</P><P>In addition for Identity Analytics alert, you will need to enable that after installing Cloud Identity Engine (Step 2-substep 4 <A href="https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/configure-xdr#configure-xdr" target="_blank">here</A>).</P><P>&nbsp;</P> Tue, 26 Apr 2022 00:31:31 GMT bbarmanroy 2022-04-26T00:31:31Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xdr-analytic-alert/m-p/482444#M1915 <P>I am not able to see all cortex XDR analytic alert on Console that is mentioned in the document . why ?</P> Mon, 25 Apr 2022 20:50:07 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xdr-analytic-alert/m-p/482444#M1915 RCDT 2022-04-25T20:50:07Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xdr-analytic-alert/m-p/482493#M1916 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/171682">@RCDT</a>&nbsp;I assume you are referring to the Analytics Alerts referred <A href="https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-analytics-alert-reference/cortex-xdr-analytics-alert-reference" target="_blank">here</A>.</P><P>&nbsp;</P><P>Once you have deployed Cortex XDR on your endpoints, you can enable XDR Analytics by referrring to Step 2- substep 3 <A href="https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/configure-xdr#configure-xdr" target="_blank">here</A>. Please take note that you need</P><P>-&nbsp;2 weeks of EDR data from 30 endpoints deploying XDR Pro and enabling Enhanced Endpoint Data collection (Step 10 substep 2 <A href="https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/endpoint-security/customizable-agent-settings/add-agent-settings-profile" target="_blank">here</A>)</P><P>- Cloud Audit logs for 5 days.&nbsp;&nbsp;</P><P>&nbsp;</P><P>In addition for Identity Analytics alert, you will need to enable that after installing Cloud Identity Engine (Step 2-substep 4 <A href="https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/configure-xdr#configure-xdr" target="_blank">here</A>).</P><P>&nbsp;</P> Tue, 26 Apr 2022 00:31:31 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xdr-analytic-alert/m-p/482493#M1916 bbarmanroy 2022-04-26T00:31:31Z