https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/re-registration-and-login-faq/m-p/572300#M6051 <P>dataset = msft_o365_dlp_raw&nbsp;<BR />How brake the raw log what is shot cut do that i have seen in you tube but im unable find how they doing that&nbsp;<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot (2).png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/56358iA2940E83D2C57320/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="Screenshot (2).png" alt="Screenshot (2).png" /></span></P> Tue, 09 Jan 2024 09:34:35 GMT Jaswanth-G 2024-01-09T09:34:35Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/re-registration-and-login-faq/m-p/572300#M6051 <P>dataset = msft_o365_dlp_raw&nbsp;<BR />How brake the raw log what is shot cut do that i have seen in you tube but im unable find how they doing that&nbsp;<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot (2).png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/56358iA2940E83D2C57320/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="Screenshot (2).png" alt="Screenshot (2).png" /></span></P> Tue, 09 Jan 2024 09:34:35 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/re-registration-and-login-faq/m-p/572300#M6051 Jaswanth-G 2024-01-09T09:34:35Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/re-registration-and-login-faq/m-p/577508#M6083 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/506096687">@Jaswanth-G</a>, thanks for reaching us using the live community.</P> <P>&nbsp;</P> <P>You need to Parse the raw logs from that dataset, I recommend you to start with the last webinar published&nbsp; about Parsing: <A href="https://live.paloaltonetworks.com/t5/cortex-xdr-webinars/cortex-customer-success-webinar-series-part-1-getting-started/ta-p/575388" target="_blank">https://live.paloaltonetworks.com/t5/cortex-xdr-webinars/cortex-customer-success-webinar-series-part-1-getting-started/ta-p/575388</A></P> <P>That one will teach you the basics needed to start working with those raw logs.</P> Fri, 16 Feb 2024 13:03:00 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/re-registration-and-login-faq/m-p/577508#M6083 jmazzeo 2024-02-16T13:03:00Z