Could you run again the installation following the https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/cortex/cortex-xdr/7-0/cortex-xdr-ag... page 9 to get installation logs?
msiexec /i c:\install\cortexxdr.msi /l*v C:\temp\cortexxdrinstall.log /qn
Please post the logs so we can have more context and help you out.
Hi there. Out of curiosity, have you tried to launch a command prompt as an administrator and kick off the MSI from there? The 1603 error in the logs makes me lean this direction. Also, TAC should be able to resolve this one quickly. Have you tried reaching out to Support?
Sorry Expert, I have same issue.
The Cortex XDR agents appears pop up same like above, but after I tried to uninstall XDR agent, the process is stuck.
I tried to generate logs for TAC support, but cytray/icon XDR console is not showing.
Please help me how to Can I generate support log XDR if the cytray not appears.
Hi @Muhammad-Rusli Looks like there are two parts to your problem:
Generating a Support File
You can generate support file from the XDR console . You can do it from the Endpoint Administration page or from Action Center.
1. Navigate to Endpoints -> Endpoint Management -> Endpoint Administration.
2. Right-click on the affected endpoint, navigate to Endpoint -> Endpoint Control -> Retrieve Support File
The process to retrieve a support file from the Action Center is described here: https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/investigation-and-response/...
Uninstalling an agent
Please create a Support ticket at the Customer Support Portal (link), with the Support File. The TAC Engineer will advise you accordingly on the uninstallation process.
Hope this helps!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!