11-28-2024 04:15 AM
Hello,
I have Cortex Pro per GB license and NGFW. I have successfully created certificate and it is showing as valid in XDR console. I have created a profile which is sending logs to Data Lake. I have applied it on many policies. But I cannot get NGFW logs in Cortex XDR.
This is my log forwarding profile:
I suspect that it can be because of the expiration of data lake in my assets tab in supoort portal:
But I think the data lake is no longer used as the licenses have changed.
Can anybody tell me what is misconfiguration? And, is there latest document or source that is clearly giving instructions for integration steps from zero?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
