topic Re: where to find more Information about event types and event sub types in event metadata of Cortex XDR agent. in Cortex XDR Discussions

where to find more Information about event types and event sub types in event metadata of Cortex XDR agent.

A.Dhade — Sun, 08 Jun 2025 14:44:29 GMT

Hi Community,

In event metadata of the there are so many fields that have no associated information in the documentation portal,

Kindly share with me the resource where I can find more information about these fields, for example, event_type: EPM event_sub_type: epm_k_injection_skipped, and so on.....

Thanks & Regards,

Abhinav D.

Re: where to find more Information about event types and event sub types in event metadata of Cortex XDR agent.

eluis — Wed, 11 Jun 2025 08:27:32 GMT

Hi A.Dhade,

could you please specify where exactly are you missing this information ? at the alerts table ? an specific XQL dataset ?

Not sure where exactly are you looking for when you are missing this information

Thanks

Luis

Re: where to find more Information about event types and event sub types in event metadata of Cortex XDR agent.

A.Elzedy — Wed, 11 Jun 2025 15:29:14 GMT

https://docs-cortex.paloaltonetworks.com/r/Cortex-XQL-Schema-Reference-Guide/XDR_DATA-Fields