Trying to setup Cortex Data Lake

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Trying to setup Cortex Data Lake

L0 Member

Hi all,  I am new to this forum and new to the job where I am having this issue so please forgive me if this is an easy question that has been answered, I could not find the info I was looking for. I am trying to setup a Cortex Data Lake for my Cortex XDR Cloud logging.  I am aware that I cannot see anything in the data lake when going to explore.  However, my issue is that used space is showing as 0mb of 7tb.  I have read many articles and I "think" that everything is setup properly but I can't seem to get any logs flowing in to the data lake.  I would greatly appreciate some assistance and I am willing to supply more information as needed I just dont know what to supply at this moment.  Thank you!

1 REPLY 1

L4 Transporter

Hi LorenPeterson,

to start with Cortex Data Lake you need to first plan your deployment.

Im gonna give you good resources to start with it, plannify your deployment calculate storage space depending on different log sources you might integrate in CDL. There is also a calculator for the sizing (find the link to it on the 1st document on how to plan your CDL implementation)

Please check the following docs

General info on CDL. I guess that you've already seen this:

https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-start... 

 

Plan your CDL deployment (including links to calculator and log integrations): 

https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-start...

 

Start sending logs to CDL:

https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-start...

 

Kind Regards and have a good CDL time,

Luis

 

  • 4064 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!