This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About DJohnson84
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About DJohnson84
09-18-2023
4Posts
1Like
1Solution
Sep 18, 2023Last Visited
User
Activity
User
Profile
Latest posts by DJohnson84
| Subject | Views | Posted |
|---|---|---|
| 2894 | 11-24-2020 05:05 AM | |
| 2565 | 11-24-2020 04:34 AM | |
| 4809 | 10-12-2020 07:42 AM | |
| 4936 | 10-02-2020 06:26 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 11-24-2020 05:05 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes |
User Badges
Community Statistics
| Member Since | 05-21-2020 04:39 AM |
| Date Last Visited | 09-18-2023 09:13 AM |
| Posts | 4 |
| Total Likes Received | 1 |
11-24-2020
05:05 AM
1 Kudo
BenHooper, I'm not saying this is the "recommended" way for excluding legitimate behaviors, but what I have done so far. When an alert is created, and verifying that it is legitimate, I add it as an alert exclusion. The thought being that the alert exclusion would be a smaller print versus excluding the whole BIOC rule. Hope that helps, DJohnson84
... View more
11-24-2020
04:34 AM
Can't find SaaS Log Collection to start ingesting external logs into Cortex XDR. All the documentations state: Click Gear > Settings > SaaS Log Collection I can't find it, I currently have Cortex XDR Pro Per Endpoint, does this license not support ingestion or am I not seeing it? I'm trying to ingest Okta authentication logs.
... View more
10-12-2020
07:42 AM
Dfalcon, Thanks for replying. I did create the install package prior, and the machines are showing as connected. The failure message was being received roughly 5-10 minutes after kicking it off. So after reviewing the logs the client side was resetting the connection which was causing the install to fail, but it happened intermittently. So a machine could fail and I could push it back to the same machine and succeed. I would look at the logs and you could see the machine reset the connection the first time and then would allow it. I was able to successfully update all of our physical machines (windows and mac) so it's on to our VM machines :). Again thanks for the reply but this issue has been resolved.
... View more
10-02-2020
06:26 AM
Good morning, I'm running into issues trying to update the cortex agent on some of our physical machines running Win 10. I'm very new to Cortex so I apologize if there's issues with my explanation of what I'm having issues with. Inside my endpoint administration we have broken our users into groups: VDI, physical and even further with Windows, Mac, and Linux systems. I wanted to push the 7.2 agent to just the physical Win 10 machines. My first test was I selected a small group to push the update to, out of the 7 machines 5 failed and 2 finished successfully, I reran the 5 that failed and they all failed again, I proceeded to select 1 machine at a time and was able to successfully push the update, I'm not sure what was causing the issue. I have since tried to push the update to the remaining physical Win 10 machines ranging from all at once the first try (All failed) to individual machines, and none have been able to update. The agents version we are currently running are: 7.0.2.42857 & 7.1.2.56067, with a few that are running the newest 7.2.0.63060. I want to know why these are failing, would the logs be on the physical machine or is there somewhere in the Cortex XDR dashboard I can see logs, I have looked and found nothing. I would prefer to just push the update to all the machines at once, since there is quite a few of them. Any help would be appreciated or to point me in the right direction. Thanks.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-18-2023
09:13 AM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks