This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Strata Logging Service Discussions
Strata Logging Service (formerly known as Cortex Data Lake) enables AI-based innovations for cybersecurity with the industry’s only approach to normalizing and stitching together your enterprise’s data. Join the discussion now.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Strata Logging Service Discussions
Strata Logging Service (formerly known as Cortex Data Lake) enables AI-based innovations for cybersecurity with the industry’s only approach to normalizing and stitching together your enterprise’s data. Join the discussion now.
About Strata Logging Service Discussions
Welcome to the Strata Logging Service discussion area! Here, you can engage in conversations about Strata Logging Service, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on Strata Logging Service.

Discussions

Start a conversation

Welcome to the Strata Logging Service Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4628 Views
  • 0 replies
  • 1 Likes

Resolved! Cortex Data Lake - Looking for a sting of data in the Description field

I am trying to do a search in CDL which will show me when a user disables their Global Protect agent on their end point. I am able to perform this search in Panorama using the search "(opaque contains 'Agent Disable')" under GlobalProtect logs. I am not able to replicate this in CDL I can see the log in CDL looking in Firewall/GlobalProtect ...

John_J_0-1704997750305.png
John_J by • L1 Bithead
  • 7791 Views
  • 1 replies
  • 0 Likes

Resolved! Exporting events from Cortex XDR

Hello,I have been doing some searching on if I can get XDR endpoint logs like processes and etc into a third party SIEM.Based on the XDR API there is no way to export events (You can technically run XQL queries using the API but this would get logged on XDR)It also looks like you cannot actually forward XDR data from the data lake to a syslog se...

Resolved! Rogue Device Discovery with Cortex XDR

Hi, I would like to implement Rogue Device Discovery with Cortex XDR but it is not clear for me what I need to do this. We have Cortex XDR Pro per Endpoint license – do I need anything else (like datalike) to set the solution? Can I expect any issues with it or it is working well?

Resolved! No Security Data Populating in AIOps

I first created a new Tenet for a Customer Support Account, selected the Americas Region, and left the CDL instance blank. I then associated the device in the Tenet view of the Hub by going to Common Services > Device Associations. I waited 24 hours and the firewall was onboarded. It appears to be pulling Heath information - Metrics and Servi...

Resolved! XDR Collectors and Data Collection Integrations missing in Configuration

Hi, I'm trying to forward external syslogs Cortex XDR and I'm unable to find XDR Collectors section and Data collection Integrations section in the Configurations. Below is what I see in the menu. I have account admin privileges. We have Advanced endpoint protection, data collection and response for 800 agents and Cortex Data Lake for 4TB. Is ...

Isuru_0-1693907369393.png
Isuru by • L1 Bithead
  • 3018 Views
  • 1 replies
  • 0 Likes
  • 35 Posts
  • 38 Subscriptions
Top Liked Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks