topic SIEM Wazuh & Cortex XDR agent / Are there known issues running both agents? in Cortex XDR Discussions

SIEM Wazuh & Cortex XDR agent / Are there known issues running both agents?

RFeyertag — Sun, 18 Jun 2023 20:30:00 GMT

Hello dear community!

Has anyone of you some expirience with Cortex XDR agent and Wazuh Agent?

We are discussing to setup wazuh as a SIEM, instead of splunk, Cortex DL, etc.

Rob

bbarmanroy — Mon, 19 Jun 2023 01:52:05 GMT

Hi @RFeyertag there is no publicly available information for the same as this does not appear to be a security product.
You might already be aware of the compatibility document here: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Compatibility-Matrix/Cortex-XDR-and-Traps-Compatibility-with-Third-Party-Security-Products

My recommendation is to deploy on a pilot set of devices to determine any performance issues, and raise a support ticket with the relevant TSF logs to kickstart any debugging.