CDL rest api support ?

[saswins]

Hi,

I am new to PANW products. I tried googling to find REST APIs to fetch logs from Cortex Datalake but with no success. Is there a way to fetch logs from Cortex Datalake via script ? (like REST API to fetch vales from Panorama)

Thanks,

[nikoolayy1]

Hello ,

There is some documentation on this:

Overview | Develop security (pan.dev)

Still if you have SIEM better feed that data there:

Forwarding Logs from Cortex Data Lake (paloaltonetworks.com)

Cortex Data Lake · GitBook (paloaltonetworks.com)

[JackSenesap]

Seems like access to the https://api.us.cdl.paloaltonetworks.com CDL via API has been shutdown. 

There are instructions to generate an API key for Cortex XDR but Rapid7IDR doesn't appear to have this option for integration.

[CONNOQSE]

Hello,

Are there any updates regarding this topic? The docs do not seem to have any content detailing whether there are API endpoints available, opposed to Cortex XDR, where you can make XQL queries and such.