topic SaaS Log Collection in Cortex XDR Discussions

SaaS Log Collection

DJohnson84 — Tue, 24 Nov 2020 12:34:25 GMT

Can't find SaaS Log Collection to start ingesting external logs into Cortex XDR.

All the documentations state: Click Gear > Settings > SaaS Log Collection

I can't find it, I currently have Cortex XDR Pro Per Endpoint, does this license not support ingestion or am I not seeing it?

I'm trying to ingest Okta authentication logs.

Re: SaaS Log Collection

gjenkins — Wed, 25 Nov 2020 16:00:51 GMT

Hi DJohnson84,

Okta Log ingestion, and Saas Log Collection as a whole, is only available with the Pro-Per-TB license. If you visit the following link, it will fall under the section titled “Other logs (From Palo Alto Networks and third-party sources).”

Features by Cortex XDR License Type