What license would be required for ingesting external logs from various vendors?

The correct answer is C. Cortex XDR Pro per TB. To ingest external logs from various vendors, you need a Cortex XDR Pro per TB license. This license allows you to collect and analyze logs from Palo Alto Networks and third-party sources, such as firewalls, proxies, endpoints, cloud services, and more. You can use the Log…

Cortex XDR Licensing and Architecture

Question

Options

ACortex XDR Pro per Endpoint
BCortex XDR Vendor Agnostic Pro
CCortex XDR Pro per TB
DCortex XDR Cloud per Host

How the community answered

(48 responses)

A
4% (2)
B
13% (6)
C
77% (37)
D
6% (3)

Explanation

To ingest external logs from various vendors, you need a Cortex XDR Pro per TB license. This license allows you to collect and analyze logs from Palo Alto Networks and third-party sources, such as firewalls, proxies, endpoints, cloud services, and more. You can use the Log Forwarding app to forward logs from the Logging Service to an external syslog receiver. The Cortex XDR Pro per Endpoint license only supports logs from Cortex XDR agents installed on endpoints. The Cortex XDR Vendor Agnostic Pro and Cortex XDR Cloud per Host licenses do not exist.

Topics

#licensing#log ingestion#third-party logs#Pro per TB

Community Discussion

No community discussion yet for this question.

Full XDR-ANALYST Practice