MineMeld End-of-Life Announcement

Showing results for 
Search instead for 
Did you mean: 
L1 Bithead



Palo Alto Networks announces the end-of-life of the hosted MineMeld™ application in AutoFocus™ on August 1, 2021. We are hoping you already picked a transition path based on email communications that were sent out regarding this announcement. If not, we are providing a list of recommended migration options, including our new Cortex™ XSOAR Threat Intel Management offering.




What Happens Now?

The hosted MineMeld application in AutoFocus will remain active through July 31, 2021. The open-source version of Minemeld will continue to exist and be supported by the open source community. As part of this process, we will guide you through every step of your migration. Here are a few options for your consideration if you have not been able to decide the migration path yet:


Option 1




 Upgrade to Cortex XSOAR Threat Intel Management with a limited-time discount offer. 

Option 2





Try the Cortex XSOAR Community Edition for free to test-drive how Cortex XSOAR Threat Intel Management can fulfill your MineMeld needs and many other use cases.


Option 3




Migrate to an open-source instance of MineMeld, which is maintained by the open-source community.



What is Cortex XSOAR Threat Intel Management?

Cortex XSOAR takes a new approach with native threat intelligence management, unifying aggregation, scoring, and sharing of threat intelligence with playbook-driven automation. All existing integrations and use cases from hosted MineMeld have been ported to Cortex XSOAR Threat Intelligence Management to ensure continuity of existing use cases.


Migration Support

If you choose to upgrade to Cortex XSOAR Threat Intel Management:

  • Your customer success representative will guide you through the migration and complete the final cutover based on your approval.
  • Professional Services are available for a white glove migration experience.
  • We’ll continue to maintain your existing MineMeld environment until your migration is complete.


Pricing and Licensing

  • You will continue to own AutoFocus per your original contract term.
  • We are offering a limited-time offer to trade up to Cortex XSOAR. Your local account representative will be in touch with more details.


Resources for More Information:


MineMeld Migration FAQ

Q: What will happen to MineMeld?

The hosted MineMeld application is going to be removed from AutoFocus on 08/01/21. 


Q: What is the migration path for existing AutoFocus MineMeld customers?

  • Your customer success representative will guide you through the migration and complete the final cutover based on your approval.
  • Professional Services are available for a white glove migration experience.
  • We’ll continue to maintain your existing MineMeld environment until your migration is complete.


Q: Will MineMeld be offered as part of Cortex XSOAR?

No. Hosted Minemeld will reach end of life on 08/01/21. XSOAR Threat Intel Management offers more capabilities than MineMeld, and is a superior choice. Get more details from the datasheet.


Q: Can we still use the open-source version of MineMeld?

Yes. You still have access to the open-source version, but you will have to download & maintain the application yourself. Palo Alto Networks will not support this version, it will be managed by the open source community.


Q: When we upgrade to XSOAR Threat Intel Management, do we get access to AutoFocus?

Yes, XSOAR Threat Intel Management includes a single AutoFocus user license. Additional AutoFocus user licenses can be purchased if needed.


Q: I have heavy customization done on my MineMeld instance, does that get migrated to TIM?

Yes, custom MineMeld miners & prototypes can be migrated to Cortex XSOAR Threat Intel Management. Any custom miners & prototypes will need to be ported to XSOAR and our Professional Services team can help you with the process.


Q: Is XSOAR Threat Intel Management on-prem or cloud based?

XSOAR Threat Intel Management is available both on-prem and in the cloud.


Q: I have created Office 365 EDLs in my MineMeld environment, will those be migrated to XSOAR Threat Intel Management?

Yes. This capability is available out of the box with Cortex XSOAR pre-built playbooks and content packs.


Q: Is the limited time discount available for all types of deployments

No. The limited time discount is only available to existing AutoFocus customers who choose to migrate to Cortex XSOAR.


Q: What will I gain if we choose to migrate?

A lot!:

  • If you bought AutoFocus for MineMeld, it's a no-brainer. As you know, MineMeld is  not easy to configure and manage; Cortex XSOAR native intel management integration is way better. With more than 550+ third-party integrations, customization of indicators, intel-based automated playbooks, and easy management, the possibilities are endless.
  • Bonus play! AutoFocus threat feed will be available out of the box with Cortex XSOAR, you will get instant access to the high fidelity Palo Alto Networks threat intel and can converge it with internal incident alerts,
  • With the open and extensible Cortex XSOAR platform, AutoFocus users can easily upgrade (with zero impact) to enjoy enterprise-class automation and orchestration, real-time collaboration, and case management. 


We’re committed to providing expert support, migration assistance and the best possible experience as you transition from hosted MineMeld to your preferred option. Please contact your Palo Alto Networks sales representative if you have any questions or send an email to minemeldupgrade@paloaltonetworks if you need immediate assistance.


Best regards,

The Palo Alto Networks Team


Cyber Elite
Cyber Elite

Why almost all useful article and discussions in MineMeld sections are archived and showing this message?

L2 Linker

Yeah, there's a boat load of links out on the net that point back to Palo Alto, as a source of reference, and all we get is this stupid EoL message.  That's a really crappy thing to do to your user community, especially those who don't have the budget to migrate.

L1 Bithead

Just a FYI: I found this service on the /r/paloaltonetworks subredit -which is a SaaS based EDL manager that works like Minemeld for $150/yr.  




Works great, and they have lots of ready to use templates of all the major cloud providers.  

L0 Member

For those who were using MineMeld exclusively for creating O365 EDLs, Palo Alto is now publishing those through EDL Hosting Service. 
EDL Hosting Service (paloaltonetworks.com)

L2 Linker

Bruce,  I appreciate that immensely, however, the firm I work for doesn't like relying on outside vendors anymore than we have to.  Besides, Palo Alto doesn't have to redirect every stinking useful link to the EoL message.  That shows very little respect for their customer base.  

L2 Linker

I wonder if they're going to offer something for Azure?

Cyber Elite
Cyber Elite



It looks like the Wayback Machine can be used to restore some of the articles. I was able to restore the guide for installing MineMeld in docker - http://web.archive.org/web/*/https://live.paloaltonetworks.com/t5/minemeld-articles/running-minemeld...


The limitation is that you need to have the link to the original artical, but I was dumb enough to not save any bookmarks... If you have any you can try if there is copy in the wayback machine.

Register or Sign-in