Monitoring the Cloud Identity Engine

[mgreer]

Does anyone have a good method for generating an alert if the Cloud Identity Engine has failed to perform an on-prem or Azure sync in the last 24 hours?

[aspatil]

Hello @mgreer ,

AD -> CIE is near-realtime (every 15-30 mins) and  XDR is once every 24 hours, you can query the pan_dss_raw dataset and check the generatedTime field

You will get a warning banner in the tenant after 72 hours of not syncing.

If you feel this has answered your query, please let us know by clicking like and  on "mark this as a Solution". Thank you.

[mgreer]

"You will get a warning banner in the tenant after 72 hours of not syncing."
Is this in the Cortex XDR tenant or in the Cloud Identity Engine app of Cortex Hub?

Thanks,

Mike