Hi @jdelio , I have a few questions about this feature. When the data lake forwards logs, do the logs come from all of Palo Alto's IPs? How is this generally handled from a SIEM? Will we need to accept a new log source per IP address? How are the different solutions differentiated in the log? For example, does it explicitly state a log comes from Cortex vs Prisma SaaS? Thank you in advance!
... View more