topic Re: CDL rest api support ? in General Topics

CDL rest api support ?

saswins — Thu, 13 Jan 2022 03:07:54 GMT

Hi,

I am new to PANW products. I tried googling to find REST APIs to fetch logs from Cortex Datalake but with no success. Is there a way to fetch logs from Cortex Datalake via script ? (like REST API to fetch vales from Panorama)

Thanks,

Re: CDL rest api support ?

nikoolayy1 — Thu, 13 Jan 2022 08:28:27 GMT

Hello ,

There is some documentation on this:

Overview | Develop security (pan.dev)

Still if you have SIEM better feed that data there:

Forwarding Logs from Cortex Data Lake (paloaltonetworks.com)

Cortex Data Lake · GitBook (paloaltonetworks.com)

Re: CDL rest api support ?

JackSenesap — Tue, 07 Feb 2023 14:00:03 GMT

Seems like access to the https://api.us.cdl.paloaltonetworks.com CDL via API has been shutdown.

There are instructions to generate an API key for Cortex XDR but Rapid7IDR doesn't appear to have this option for integration.

Re: CDL rest api support ?

CONNOQSE — Tue, 30 Jan 2024 07:57:26 GMT

Hello,

Are there any updates regarding this topic? The docs do not seem to have any content detailing whether there are API endpoints available, opposed to Cortex XDR, where you can make XQL queries and such.