topic Re: Cortex XDR Pro Per GB License in Cortex XDR Discussions

Cortex XDR Pro Per GB License

RichardChou — Wed, 20 Dec 2023 07:47:52 GMT

Hello：

Does anyone know if XDR Pro Per GB license can operate alone?
If I only want to analyze Firewall events, can I just buy a Per GB License?
Is there any documentation that can explain this?

Thank you

Re: Cortex XDR Pro Per GB License

aleksandar.astardzhiev — Wed, 20 Dec 2023 14:55:50 GMT

Hi @RichardChou ,

If I understand correctly you need centralized place to store your firewalls logs and use search queries to over those logs, without using Cortex XDR.

The "Logging Service" (which before was called Cortex Data Lake) is probably what you look for - https://www.paloaltonetworks.com/resources/datasheets/logging-service

There you can use the Explore tool to query search in your log https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/retrieve-log-records

Re: Cortex XDR Pro Per GB License

RichardChou — Thu, 21 Dec 2023 05:12:17 GMT

Thanks for your reply
If I just buy a Per GB license and then set it up to collect firewall data.
So how will the threat logs generated by Firewall be displayed on the XDR console?