topic Integration of SIEM Instances with Load Balancer IPs in Cortex XSOAR Discussions https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/integration-of-siem-instances-with-load-balancer-ips/m-p/616040#M3760 <P>Can we integrate two instances of the SIEM, given that both IP addresses belong to the same SIEM but are associated with load balancer IPs? However, if we integrate both instances, there is a slight chance of data duplication. What would be the best approach to integrate with the load balancer IPs while avoiding any duplication? <LI-PRODUCT title="Cortex XSOAR" id="Cortex_XSOAR"></LI-PRODUCT>&nbsp;</P> Mon, 04 Nov 2024 05:05:38 GMT S.gupta868738 2024-11-04T05:05:38Z Integration of SIEM Instances with Load Balancer IPs https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/integration-of-siem-instances-with-load-balancer-ips/m-p/616040#M3760 <P>Can we integrate two instances of the SIEM, given that both IP addresses belong to the same SIEM but are associated with load balancer IPs? However, if we integrate both instances, there is a slight chance of data duplication. What would be the best approach to integrate with the load balancer IPs while avoiding any duplication? <LI-PRODUCT title="Cortex XSOAR" id="Cortex_XSOAR"></LI-PRODUCT>&nbsp;</P> Mon, 04 Nov 2024 05:05:38 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/integration-of-siem-instances-with-load-balancer-ips/m-p/616040#M3760 S.gupta868738 2024-11-04T05:05:38Z Re: Integration of SIEM Instances with Load Balancer IPs https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/integration-of-siem-instances-with-load-balancer-ips/m-p/1234480#M4113 <P>I'd recommend setting up preprocessing rules for your alerts in order to avoid data duplication, more information here:&nbsp;<A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.12/Cortex-XSOAR-Administrator-Guide/Pre-Process-Rules" target="_blank">https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.12/Cortex-XSOAR-Administrator-Guide/Pre-Process-Rules</A></P> Tue, 22 Jul 2025 16:36:59 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/integration-of-siem-instances-with-load-balancer-ips/m-p/1234480#M4113 Ivetto 2025-07-22T16:36:59Z