https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xql-hostfirewall-events/m-p/1253448#M9299 <P data-path-to-node="6">Hi everyone,</P> <P data-path-to-node="7">What is the best and most efficient way to review network traffic and correlate or compare it with Host Firewall events using XQL?</P> <P data-path-to-node="8">I am looking for the optimal approach to query and analyze this data together without impacting performance. If anyone has a sample XQL query or advice on how you handle this in your SOC, I would really appreciate it.</P> <P data-path-to-node="9">Thanks in advance!</P> Mon, 04 May 2026 16:46:48 GMT J.Gammara 2026-05-04T16:46:48Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xql-hostfirewall-events/m-p/1253448#M9299 <P data-path-to-node="6">Hi everyone,</P> <P data-path-to-node="7">What is the best and most efficient way to review network traffic and correlate or compare it with Host Firewall events using XQL?</P> <P data-path-to-node="8">I am looking for the optimal approach to query and analyze this data together without impacting performance. If anyone has a sample XQL query or advice on how you handle this in your SOC, I would really appreciate it.</P> <P data-path-to-node="9">Thanks in advance!</P> Mon, 04 May 2026 16:46:48 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xql-hostfirewall-events/m-p/1253448#M9299 J.Gammara 2026-05-04T16:46:48Z