Cortex XDR to google chronicle

[davoxxxx]

Dear community,

One of my client is using Google chronicle as their SIEM .

They would like to know and understand what is required on Palo-Alto Cortex XDR side to send their logs to Google Chronicle . 

Is there a simple way to do this ? 

Do we need a Broker VM ? 

Thanks

Da

[nsinghvirk]

Hello @davoxxxx 

Thanks for reaching out on LiveCommunity!

You can setup a syslog receiver to forward logs/alerts and then send them to SIEM solution by configuring notification forwarding. Please refer to below document for details.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Integrate-a-syslog-re...

Please click Accept as Solution to acknowledge that the answer to your question has been provided.