License

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

License

L2 Linker

Hello, 

 

I know that when we buy cortex xdr prevent and pro per GB license, it comes with default data lake. But we cannot access this data lake from HUBs as we did in the past. 

 

And, I know that we can but Data Lake for Prisma and IOTs. But I wonder can we buy a data lake wwhere we can access from Hubs and see XDR logs and data (including ingested)?

1 REPLY 1

L4 Transporter

Hello @JahidAliyev ,

Thanks for reaching out on LiveCommunity!

Cortex XDR has now Native integration with data lake. You can view the logs ingested using XQL query. You can call xdr_data dataset for the same.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-XQL-Language-Reference/Datasets-and...

If you feel this has answered your query, please let us know by clicking on "mark this as a Solution". Thank you.

 

Ashutosh Patil
  • 308 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!