https://live.paloaltonetworks.com/t5/enterprise-data-loss-prevention/how-to-query-historical-logs/m-p/589510#M17 <P>I'm trying to investigate our old logs that have been stored for a couple of years. I can't figure where in Cortex I can issue an XQL query to investigate these historical/archival logs.</P> <P>&nbsp;</P> <P>Also, we are not clear on how much it would cost us to run these queries since we are talking about a vast amount of logs across many years. We assumed that archival data is cheaper to store and cheaper to query yet we are not sure about the actual cost.</P> <P>&nbsp;</P> <P>&nbsp;</P> Thu, 13 Jun 2024 08:47:53 GMT Net-Work 2024-06-13T08:47:53Z https://live.paloaltonetworks.com/t5/enterprise-data-loss-prevention/how-to-query-historical-logs/m-p/589510#M17 <P>I'm trying to investigate our old logs that have been stored for a couple of years. I can't figure where in Cortex I can issue an XQL query to investigate these historical/archival logs.</P> <P>&nbsp;</P> <P>Also, we are not clear on how much it would cost us to run these queries since we are talking about a vast amount of logs across many years. We assumed that archival data is cheaper to store and cheaper to query yet we are not sure about the actual cost.</P> <P>&nbsp;</P> <P>&nbsp;</P> Thu, 13 Jun 2024 08:47:53 GMT https://live.paloaltonetworks.com/t5/enterprise-data-loss-prevention/how-to-query-historical-logs/m-p/589510#M17 Net-Work 2024-06-13T08:47:53Z