https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xdr-collector-dns/m-p/1220376#M7877 <P>Does anyone know if there is a native DNS collector, similar to the DHCP Collector Agent, for <LI-PRODUCT title="Cortex XDR" id="Cortex_XDR"></LI-PRODUCT>&nbsp;? My goal is to enrich XDR with more DNS-related information.</P> Thu, 13 Feb 2025 14:47:34 GMT tlmarques 2025-02-13T14:47:34Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xdr-collector-dns/m-p/1220376#M7877 <P>Does anyone know if there is a native DNS collector, similar to the DHCP Collector Agent, for <LI-PRODUCT title="Cortex XDR" id="Cortex_XDR"></LI-PRODUCT>&nbsp;? My goal is to enrich XDR with more DNS-related information.</P> Thu, 13 Feb 2025 14:47:34 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xdr-collector-dns/m-p/1220376#M7877 tlmarques 2025-02-13T14:47:34Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xdr-collector-dns/m-p/1220377#M7878 <P>I've see this:<BR /><A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Ingest-Windows-DNS-Debug-logs-using-Elasticsearch-Filebeat" target="_blank">https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Ingest-Windows-DNS-Debug-logs-using-Elasticsearch-Filebeat</A><BR /><BR />this is works? someone used that??<BR /><BR />How i can see if this are working??</P> Thu, 13 Feb 2025 14:57:36 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xdr-collector-dns/m-p/1220377#M7878 tlmarques 2025-02-13T14:57:36Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xdr-collector-dns/m-p/1221585#M7943 <P>i've try this but not working...</P> Fri, 21 Feb 2025 13:14:55 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xdr-collector-dns/m-p/1221585#M7943 tlmarques 2025-02-21T13:14:55Z