topic Tagging all data from a broker-vm in Cortex XSIAM Discussions

topic Tagging all data from a broker-vm in Cortex XSIAM Discussions https://live.paloaltonetworks.com/t5/cortex-xsiam-discussions/tagging-all-data-from-a-broker-vm/m-p/1240058#M261 <P>Hi All,</P> <P>has anyone done this to date yet?</P> <P>I have a broker-vm deployed  in a specific region and want to tag any and all data from this broker-vm with a custom region tag.. </P> <P>anyone written a parsing rule for this as yet?</P> <P> </P> <P>thanks in adv</P> Wed, 15 Oct 2025 13:28:59 GMT PA_nts 2025-10-15T13:28:59Z Tagging all data from a broker-vm https://live.paloaltonetworks.com/t5/cortex-xsiam-discussions/tagging-all-data-from-a-broker-vm/m-p/1240058#M261 <P>Hi All,</P> <P>has anyone done this to date yet?</P> <P>I have a broker-vm deployed  in a specific region and want to tag any and all data from this broker-vm with a custom region tag.. </P> <P>anyone written a parsing rule for this as yet?</P> <P> </P> <P>thanks in adv</P> Wed, 15 Oct 2025 13:28:59 GMT https://live.paloaltonetworks.com/t5/cortex-xsiam-discussions/tagging-all-data-from-a-broker-vm/m-p/1240058#M261 PA_nts 2025-10-15T13:28:59Z