Palo_Alto_Networks
PSE-CORTEX · Question #149
How can the required log ingestion license be determined when sizing a Cortex XSIAM deployment?
The correct answer is C. Ask the customer for average log ingestion estimates from their existing SIEM. See the full explanation below for the reasoning.
Question
How can the required log ingestion license be determined when sizing a Cortex XSIAM deployment?
Options
- AUse the Cortex Data Lake Calculator to estimate the volume of third-party logs.
- BCount the number of correlation sources and multiply by desired retention days.
- CAsk the customer for average log ingestion estimates from their existing SIEM.
- DAsk the customer to provide average daily alert volume.
How the community answered
(17 responses)- A6% (1)
- B12% (2)
- C76% (13)
- D6% (1)
Community Discussion
No community discussion yet for this question.