Endpoints without IP and MAC address

[Shahwaz_Md]

Hi,

There are multiple endpoints without IP and MAC address, what could be the possible reason for it?

Thanks

[mfakhouri]

Hi @Shahwaz_Md

Could you please provide any additional information or context to your issue? Where are you unable to view the endpoints without IP and MAC addresses?

Thanks!

[Shahwaz_Md]

In the All endpoint list

[neelrohit]

Hi @Shahwaz_Md , 

Understand your concern. Assuming that you have Cortex XDR Pro license and you should be able to run query builder, could you try running a query on registry items on all hosts for the last 24 hours and see if there is data which is being populated? Since this could be some backend stuff, we would request you to kindly open a support case and our engineering team should be able to fix it in the backend if that is the required remediation. 

Engineering might also request you to send a couple of Tech Support Files from the endpoints, hence kindly provide the same. 

Steps mentioned here:  https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/investigation-and-respo...