where to find more Information about event types and event sub types in event metadata of Cortex XDR agent.

[A.Dhade]

Hi Community, 

In event metadata of the Cortex XDR there are so many fields that have no associated information in the documentation portal,

Kindly share with me the resource where I can find more information about these fields, for example, event_type: EPM event_sub_type: epm_k_injection_skipped, and so on.....

Thanks & Regards,

Abhinav D.

[eluis]

Hi A.Dhade,

could you please specify where exactly are you missing this information ? at the alerts table ? an specific XQL dataset ? 

Not sure where exactly are you looking for when you are missing this information

Thanks

Luis 

[A.Elzedy · Accepted solution]

https://docs-cortex.paloaltonetworks.com/r/Cortex-XQL-Schema-Reference-Guide/XDR_DATA-Fields