<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Send XSOAR audit logs to splunk in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/send-xsoar-audit-logs-to-splunk/m-p/558861#M113359</link>
    <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/43480"&gt;@BPry&lt;/a&gt;&amp;nbsp;, the Integration works. We are having trouble reading Audit Logs/Management logs from SaaS xsoar via API.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;It just says no audit log found. Have anyone pulled audit logs via api from XSOAR, if so what is the URI that was used?&lt;/P&gt;</description>
    <pubDate>Wed, 20 Sep 2023 19:18:49 GMT</pubDate>
    <dc:creator>Moh.Yasser</dc:creator>
    <dc:date>2023-09-20T19:18:49Z</dc:date>
    <item>
      <title>Send XSOAR audit logs to splunk</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/send-xsoar-audit-logs-to-splunk/m-p/547899#M111890</link>
      <description>&lt;P&gt;Is there any documentation or can someone guide sending logs to splunk from XSOAR? Both are SaaS products.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;LI-PRODUCT title="Cortex XSOAR" id="Cortex_XSOAR"&gt;&lt;/LI-PRODUCT&gt;&amp;nbsp;#Splunk&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 30 Jun 2023 18:40:13 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/send-xsoar-audit-logs-to-splunk/m-p/547899#M111890</guid>
      <dc:creator>Moh.Yasser</dc:creator>
      <dc:date>2023-06-30T18:40:13Z</dc:date>
    </item>
    <item>
      <title>Re: Send XSOAR audit logs to splunk</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/send-xsoar-audit-logs-to-splunk/m-p/547945#M111900</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/290616"&gt;@Moh.Yasser&lt;/a&gt;,&lt;/P&gt;
&lt;P&gt;Take a look at &lt;A href="https://xsoar.pan.dev/docs/reference/integrations/splunk-py" target="_self"&gt;SplunkPy&lt;/A&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Sun, 02 Jul 2023 15:31:30 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/send-xsoar-audit-logs-to-splunk/m-p/547945#M111900</guid>
      <dc:creator>BPry</dc:creator>
      <dc:date>2023-07-02T15:31:30Z</dc:date>
    </item>
    <item>
      <title>Re: Send XSOAR audit logs to splunk</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/send-xsoar-audit-logs-to-splunk/m-p/558861#M113359</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/43480"&gt;@BPry&lt;/a&gt;&amp;nbsp;, the Integration works. We are having trouble reading Audit Logs/Management logs from SaaS xsoar via API.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;It just says no audit log found. Have anyone pulled audit logs via api from XSOAR, if so what is the URI that was used?&lt;/P&gt;</description>
      <pubDate>Wed, 20 Sep 2023 19:18:49 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/send-xsoar-audit-logs-to-splunk/m-p/558861#M113359</guid>
      <dc:creator>Moh.Yasser</dc:creator>
      <dc:date>2023-09-20T19:18:49Z</dc:date>
    </item>
  </channel>
</rss>

