Cortex XDR to google chronicle

davoxxxx — Mon, 14 Oct 2024 08:01:24 GMT

Dear community,

One of my client is using Google chronicle as their SIEM .

They would like to know and understand what is required on Palo-Alto Cortex XDR side to send their logs to Google Chronicle .

Is there a simple way to do this ?

Do we need a Broker VM ?

Thanks

Re: Cortex XDR to google chronicle

nsinghvirk — Mon, 14 Oct 2024 15:16:10 GMT

Hello @davoxxxx

Thanks for reaching out on LiveCommunity!

You can setup a syslog receiver to forward logs/alerts and then send them to SIEM solution by configuring notification forwarding. Please refer to below document for details.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Integrate-a-syslog-receiver

Please click Accept as Solution to acknowledge that the answer to your question has been provided.

topic Re: Cortex XDR to google chronicle in Cortex XDR Discussions

Cortex XDR to google chronicle

Re: Cortex XDR to google chronicle