how to check PAN OS version running in the firewall in cortex XDR

[M.K431848]

how to check PAN OS version running in the firewall in cortex XDR

[aspatil]

Hello @M.K431848 ,

Thanks for reaching out on LiveCommunity!

I couldn't find many options, but one way to ensure that data is streaming into your tenant is by using the following query: dataset = panw_ngfw_system_raw| filter log_source_id = "[NGFW device SN].

You can refer to the official documentation for more details:

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Ingest-data-from-Next...

Here’s an example query you can use:
dataset = panw_ngfw_system_raw
|fields log_source_id , log_source_name , config_version
|dedup log_source_id

Please check if the config_version field or any other field provides the required results.

If this answers your query, kindly let us know by clicking "Mark this as a Solution." Thank you.