topic Re: SLS is required for Ingesting NGFW logs? in Cortex XDR Discussions

SLS is required for Ingesting NGFW logs?

SeanDeHarris — Tue, 29 Apr 2025 04:14:06 GMT

Hello all,

I have Pro per GB in my Cortex XDR and wish to gain more visablity in Network.
Is it compulsory to have Strata Logging Service license in order to make this works?
does Strata Logging Service license comes with my Firewall subscription or do I need to purchase separately?

thanks

Re: SLS is required for Ingesting NGFW logs?

mavega — Tue, 29 Apr 2025 15:13:27 GMT

Hi,

Thanks for reaching out LC.

Please check with your account team regarding the licenses purchased.

Below info show you how to ingest you NGFW logs into cortex, using SLS or SysLog approach:

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Ingest-data-from-Next-Generation-Firewall

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Ingest-Next-Generation-Firewall-logs-using-the-Syslog-collector

If this helps, please mark response as solution

Re: SLS is required for Ingesting NGFW logs?

vinohtkumar — Mon, 05 May 2025 09:04:10 GMT

@SeanDeHarris paloalto offers zero tier sls for pro-per gb license where you can ingest paloalto ngfw logs from device to cortex xdr.