License

JahidAliyev — Thu, 18 Apr 2024 18:43:40 GMT

Hello,

I know that when we buy cortex xdr prevent and pro per GB license, it comes with default data lake. But we cannot access this data lake from HUBs as we did in the past.

And, I know that we can but Data Lake for Prisma and IOTs. But I wonder can we buy a data lake wwhere we can access from Hubs and see XDR logs and data (including ingested)?

Re: License

aspatil — Mon, 08 Apr 2024 10:23:46 GMT

Hello @JahidAliyev ,

Thanks for reaching out on LiveCommunity!

Cortex XDR has now Native integration with data lake. You can view the logs ingested using XQL query. You can call xdr_data dataset for the same.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-XQL-Language-Reference/Datasets-and-Presets

If you feel this has answered your query, please let us know by clicking on "mark this as a Solution". Thank you.

topic License in Cortex XDR Discussions

License

Re: License