https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/dataset-xdr-data-field-auth-outcome-reason-codes-table/m-p/1253522#M9313 <P>we often see entries in dataset xdr_data where auth_outcome = "FAILURE" and auth_outcome_reason contains a code number (e.g. 14, 18, 25, …). It seems that these codes are PAN internal and I could not find a table explaining where these codes come from and what they mean. Does anybody know the explanation of these codes? Thanks</P> Wed, 06 May 2026 12:26:09 GMT atschopp 2026-05-06T12:26:09Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/dataset-xdr-data-field-auth-outcome-reason-codes-table/m-p/1253522#M9313 <P>we often see entries in dataset xdr_data where auth_outcome = "FAILURE" and auth_outcome_reason contains a code number (e.g. 14, 18, 25, …). It seems that these codes are PAN internal and I could not find a table explaining where these codes come from and what they mean. Does anybody know the explanation of these codes? Thanks</P> Wed, 06 May 2026 12:26:09 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/dataset-xdr-data-field-auth-outcome-reason-codes-table/m-p/1253522#M9313 atschopp 2026-05-06T12:26:09Z