<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic CIE Data Sync Alert Across Customers – XDR Console in Cortex XDR Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cie-data-sync-alert-across-customers-xdr-console/m-p/1233823#M8542</link>
    <description>&lt;P data-start="200" data-end="208"&gt;Hi Team,&lt;/P&gt;
&lt;P data-start="210" data-end="390"&gt;We are experiencing the same issue across all customers on the date 10-07-2025. In the XDR Management Console, we are seeing a notification stating that the CIE data is not synced.&lt;/P&gt;
&lt;P data-start="392" data-end="432"&gt;However, we have verified the following:&lt;/P&gt;
&lt;UL data-start="434" data-end="711"&gt;
&lt;LI data-start="434" data-end="499"&gt;
&lt;P data-start="436" data-end="499"&gt;The Palo Alto Hub sync status shows &lt;STRONG data-start="472" data-end="483"&gt;success&lt;/STRONG&gt; with no errors.&lt;/P&gt;
&lt;/LI&gt;
&lt;LI data-start="500" data-end="557"&gt;
&lt;P data-start="502" data-end="557"&gt;The &lt;STRONG data-start="506" data-end="532"&gt;"Last Change Detected"&lt;/STRONG&gt; timestamp is up to date.&lt;/P&gt;
&lt;/LI&gt;
&lt;LI data-start="558" data-end="610"&gt;
&lt;P data-start="560" data-end="610"&gt;The CIE agent connectivity test is &lt;STRONG data-start="595" data-end="609"&gt;successful&lt;/STRONG&gt;.&lt;/P&gt;
&lt;/LI&gt;
&lt;LI data-start="611" data-end="711"&gt;
&lt;P data-start="613" data-end="711"&gt;The XQL query logs (dataset = &lt;CODE data-start="643" data-end="656"&gt;pan_dss_raw&lt;/CODE&gt;) show that the latest data is generated on &lt;STRONG data-start="700" data-end="710"&gt;July 6&lt;/STRONG&gt;.&lt;/P&gt;
&lt;/LI&gt;
&lt;/UL&gt;
&lt;P data-start="713" data-end="816"&gt;Can someone help clarify why this behavior is occurring? Is anyone else experiencing the same scenario?&lt;/P&gt;</description>
    <pubDate>Fri, 11 Jul 2025 12:29:43 GMT</pubDate>
    <dc:creator>Vinothkumar_SBA</dc:creator>
    <dc:date>2025-07-11T12:29:43Z</dc:date>
    <item>
      <title>CIE Data Sync Alert Across Customers – XDR Console</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cie-data-sync-alert-across-customers-xdr-console/m-p/1233823#M8542</link>
      <description>&lt;P data-start="200" data-end="208"&gt;Hi Team,&lt;/P&gt;
&lt;P data-start="210" data-end="390"&gt;We are experiencing the same issue across all customers on the date 10-07-2025. In the XDR Management Console, we are seeing a notification stating that the CIE data is not synced.&lt;/P&gt;
&lt;P data-start="392" data-end="432"&gt;However, we have verified the following:&lt;/P&gt;
&lt;UL data-start="434" data-end="711"&gt;
&lt;LI data-start="434" data-end="499"&gt;
&lt;P data-start="436" data-end="499"&gt;The Palo Alto Hub sync status shows &lt;STRONG data-start="472" data-end="483"&gt;success&lt;/STRONG&gt; with no errors.&lt;/P&gt;
&lt;/LI&gt;
&lt;LI data-start="500" data-end="557"&gt;
&lt;P data-start="502" data-end="557"&gt;The &lt;STRONG data-start="506" data-end="532"&gt;"Last Change Detected"&lt;/STRONG&gt; timestamp is up to date.&lt;/P&gt;
&lt;/LI&gt;
&lt;LI data-start="558" data-end="610"&gt;
&lt;P data-start="560" data-end="610"&gt;The CIE agent connectivity test is &lt;STRONG data-start="595" data-end="609"&gt;successful&lt;/STRONG&gt;.&lt;/P&gt;
&lt;/LI&gt;
&lt;LI data-start="611" data-end="711"&gt;
&lt;P data-start="613" data-end="711"&gt;The XQL query logs (dataset = &lt;CODE data-start="643" data-end="656"&gt;pan_dss_raw&lt;/CODE&gt;) show that the latest data is generated on &lt;STRONG data-start="700" data-end="710"&gt;July 6&lt;/STRONG&gt;.&lt;/P&gt;
&lt;/LI&gt;
&lt;/UL&gt;
&lt;P data-start="713" data-end="816"&gt;Can someone help clarify why this behavior is occurring? Is anyone else experiencing the same scenario?&lt;/P&gt;</description>
      <pubDate>Fri, 11 Jul 2025 12:29:43 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cie-data-sync-alert-across-customers-xdr-console/m-p/1233823#M8542</guid>
      <dc:creator>Vinothkumar_SBA</dc:creator>
      <dc:date>2025-07-11T12:29:43Z</dc:date>
    </item>
    <item>
      <title>Re: CIE Data Sync Alert Across Customers – XDR Console</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cie-data-sync-alert-across-customers-xdr-console/m-p/1233825#M8543</link>
      <description>&lt;P&gt;Hi&amp;nbsp;Vinothkumar_SBA,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;After some internal investigations, I can confirm that there is a backend issue being researched and on the way to be solved.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Please open a TAC support ticket and upload screenshots of your evidences (xql query showing last data from x date), sync failure notifications in tenant and hub saying that sync is Ok&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution". Thank you.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;KR,&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Luis&lt;/P&gt;
&lt;P&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 11 Jul 2025 14:25:11 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cie-data-sync-alert-across-customers-xdr-console/m-p/1233825#M8543</guid>
      <dc:creator>eluis</dc:creator>
      <dc:date>2025-07-11T14:25:11Z</dc:date>
    </item>
  </channel>
</rss>

