topic how to check PAN OS version running in the firewall in cortex XDR in Cortex XDR Discussions

how to check PAN OS version running in the firewall in cortex XDR

M.K431848 — Fri, 14 Feb 2025 10:21:53 GMT

how to check PAN OS version running in the firewall in cortex XDR

Re: how to check PAN OS version running in the firewall in cortex XDR

aspatil — Mon, 17 Feb 2025 12:45:48 GMT

Thanks for reaching out on LiveCommunity!

I couldn't find many options, but one way to ensure that data is streaming into your tenant is by using the following query: dataset = panw_ngfw_system_raw| filter log_source_id = "[NGFW device SN].

You can refer to the official documentation for more details:

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Ingest-data-from-Next-Generation-Firewall

Here’s an example query you can use:
dataset = panw_ngfw_system_raw
|fields log_source_id , log_source_name , config_version
|dedup log_source_id

Please check if the config_version field or any other field provides the required results.

If this answers your query, kindly let us know by clicking "Mark this as a Solution." Thank you.