License

[JahidAliyev]

Hello, 

I know that when we buy cortex xdr prevent and pro per GB license, it comes with default data lake. But we cannot access this data lake from HUBs as we did in the past. 

And, I know that we can but Data Lake for Prisma and IOTs. But I wonder can we buy a data lake wwhere we can access from Hubs and see XDR logs and data (including ingested)?

[aspatil]

Hello @JahidAliyev ,

Thanks for reaching out on LiveCommunity!

Cortex XDR has now Native integration with data lake. You can view the logs ingested using XQL query. You can call xdr_data dataset for the same.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-XQL-Language-Reference/Datasets-and...

If you feel this has answered your query, please let us know by clicking on "mark this as a Solution". Thank you.