This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About weejh
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About weejh
09-21-2023
12Posts
0Likes
2Solutions
Sep 21, 2023Last Visited
User
Activity
User
Profile
Latest posts by weejh
| Subject | Views | Posted |
|---|---|---|
| 1013 | 01-12-2023 01:08 AM | |
| 1063 | 01-10-2023 05:29 AM | |
| 2463 | 03-24-2022 12:09 AM | |
| 2471 | 03-23-2022 11:57 PM | |
| 2575 | 03-21-2022 10:39 PM | |
| 1573 | 03-15-2022 02:50 AM | |
| 2151 | 11-29-2021 05:24 AM | |
| 3030 | 10-29-2021 01:50 AM | |
| 3103 | 10-26-2021 10:37 PM | |
| 3215 | 10-25-2021 11:58 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes |
User Badges
Community Statistics
| Member Since | 02-09-2021 09:38 PM |
| Date Last Visited | 09-21-2023 01:07 AM |
| Posts | 12 |
01-10-2023
05:29 AM
Hello
I've a broker VM that is offline in Cortex XDR, do I need to remove the offline broker VM from Cortex XDR then register it?
... View more
03-24-2022
12:09 AM
Hi Thanks for the update. I believe the Cisco ISE syslog format may not be CEF or LEEF formatted and need to create necessary parsing rules. For broker vm is configured to listen to TCP514 and firewall enabled to allow broker vm IP with TCP514.
... View more
03-23-2022
11:57 PM
Hi Hi Thanks for the update. Yes, I need to confirm Cisco ISE syslog format, which I missed it earlier.
... View more
03-21-2022
10:39 PM
Hi Anyone successfully ingest logs from Cisco ISE to Cortex XDR via syslog? I've activated the syslog collector of broker VM for TCP514 and format set to auto detect, following this documentation, and configured the Cisco ISE to forward the logs to broker VM accordingly. However, when I hover over the Syslog Collector link in the Apps field of the broker VM, the metrices of Syslog Collector is always 0 logs/s for logs received or logs sent, see screenshots for detail. Any guidance if I missed anything? Are there any methods to verify the syslog is ingesting to Cortex XDR properly? Thanks.
... View more
03-15-2022
02:50 AM
Hi Any guidance to create custom xql widget for ingestion data, such as the screenshot? Thanks in advance
... View more
- Tags:
- XQL
11-29-2021
05:24 AM
Hi If I'm not mistaken, after I removed the broker VM from the Cortex XDR management console. I waited for a few days and I'm able to it back to console via https://<broker_vm_ip_address>/. Hope this helps.
... View more
10-29-2021
01:50 AM
Hi Thanks for the reply. from the screenshot, is this the proxy setup that we should use to proxy Filebeat communication? If yes, what should be the address and port?
... View more
10-26-2021
10:37 PM
Hi Thanks for your reply. Yes, the broker VM is setup according to links you've shared. I guess the next step is " When using the broker VM, ensure that you activate the Local Agent Settings applet with the Agent Proxy enabled." May I know how validate that Agent Proxy is enabled?
... View more
10-25-2021
11:58 PM
Hi everyone From the Ingest Logs from Elasticsearch Filebeat documentation, it mentioned "use the broker VM to proxy Filebeat communication". May I know how to configure the broker VM as proxy for Filebeat communication?
... View more
10-17-2021
07:13 PM
Hi Thanks for the updates. After the Broker VM is removed, can I add the Broker VM back to the Cortex XDR management console?
... View more
10-14-2021
11:38 PM
Hi How to add the removed broker VM to the Cortex XDR management console?
... View more
- Tags:
- Cortex XDR
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-21-2023
01:07 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks