Cortex XSIAM

Buy or Renew

Cortex XSIAM

Resources for Cortex XSIAM, Palo Alto Networks’ autonomous security platform powering the Modern SOC.

Welcome to the Cortex XSIAM LIVEcommunity! Explore how-to guides, best practices, and on-demand videos to help you get the most out of Cortex XSIAM. Have questions or insights to share? Join the conversation in our Discussions forums and connect with our Product Experts.

Stay in the loop—subscribe now to get the latest product updates delivered to you.

Articles

Cortex XSIAM Use Case Definition Template

06-16-2023 — Use Case Definition (UCD) Template This template will help you understand and leverage the UCD to benefit implementation strategy, understand how your Incident Response (IR) process fits into XSIAM, and identify integrations for ingestion/enrichment needed. The XSIAM Use Case Definition Templa... — Read more

Labels: Cortex XSIAM
1582 published by rtsedaka in Cortex XSIAM Customer Articles
06-16-2023 edited by rtsedaka

Blogs

Code Less, Do More with Cortex AgentiX

05-29-2026 — Use natural language to build scripts for your playbooks and agents. This fourth video in our series shows you how to prompt our Automation Engineer to build you scripts or troubleshoot existing ones. No more coding from scratch. Let the Automatio... — Read more

Labels: Cortex AgentiX Cortex Cloud Cortex XDR Cortex XSIAM
323 by JGoh in Community Blogs

Using AI Prompts in Cortex AgentiX

05-29-2026 — This third video in the series covers best practices for building AI prompts in Cortex AgentiX. Learn how to optimize the prompt, test it and save it in your prompt library for reuse in playbooks or agents. — Read more

Labels: Cortex AgentiX Cortex Cloud Cortex XDR Cortex XSIAM
274 by JGoh in Community Blogs

Building Your First Agent in Cortex AgentiX

05-29-2026 — This second video in our series goes over how to build custom agents in Cortex AgentiX. Learn how to give an agent a "job description", specific actions and permissions. Here’s how to build your AI dream team. — Read more

Labels: Cortex AgentiX Cortex Cloud Cortex XDR Cortex XSIAM
285 by JGoh in Community Blogs

Cortex AgentiX: Build, Deploy, and Govern the AI agent workforce of the Future

05-14-2026 — This is the first video in a series of videos highlighting the key features in Cortex AgentiX and agentic AI capabilities available to you in Cortex XSIAM, Cortex XDR and Cortex Cloud. In this video you will get a quick tour of Cortex AgentiX and ... — Read more

Labels: Cortex AgentiX Cortex Cloud Cortex XDR Cortex XSIAM
1076 1 5 by JayGolf in Community Blogs

Guide to Onboard and Ingest logs from Firewalls to Strata Logging Service and Cortex XSIAM

07-08-2025 — Guide to Onboard and Ingest logs from Firewalls to Strata Logging Service and Cortex XSIAM — Read more

Labels: Cortex XSIAM Log Forwarding Log Ingestion SCM SCM Pro SLS Strata Cloud Manager Strata Logging Service XSIAM
14496 1 by nsyed in Community Blogs

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.

Author	Topic	Views	Replies
JohanBogema 06-08-2026	life of a case Hi all, I am trying to figure out the life of a case and run into a question I can't seem to find the documentation about:What happens when a case h... — Read more posted in Cortex XSIAM Discussions	34	1
A.Velusamy 06-08-2026	Cloud Identity Engine - CIE Hi, Is anyone using Cloud Identity Engine in XSIAM? How useful is it, and could you share your use case and experience? Thanks posted in Cortex XSIAM Discussions	105	1
bridgetlitt 06-04-2026	Azure XSIAM How is on-boarding logs using Microsoft Azure integration different from using the Azure Event hub integration? https://docs-cortex.paloaltonetworks.... — Read more posted in Cortex XSIAM Discussions	181	2
PA_nts 06-03-2026	IOC Exclusion for when an IOC was denied by the FW Hi All, so when an IOC is added for an IP address for example in XSIAM, and a FW logs containing this IP is ingested to XSIAM, then XSIAM will auto cr... — Read more posted in Cortex XSIAM Discussions	168	2
H.Eldessouki 06-01-2026	bulk close issues Hello teamI have the following scenario of 16K open issues and I would like to perform mass closure of these open cases. Is there any way to do this... — Read more posted in Cortex XSIAM Discussions	293	2