Which dataset should an analyst search when looking for Palo Alto Networks NGFW logs?

The correct answer is C. dataset = panw_ngfw_traffic_raw. Palo Alto Networks NGFW (firewall) logs are ingested into the panw_ngfw_traffic_raw dataset in XSIAM. Querying this dataset returns the raw firewall log records you need.

Data Management and Ingestion

Question

Options

Adataset = pan_dss_raw
Bdataset = ngfw_threat_panw_raw
Cdataset = panw_ngfw_traffic_raw
Ddataset = ngfw*

How the community answered

(32 responses)

A
3% (1)
B
3% (1)
C
88% (28)
D
6% (2)

Explanation

Palo Alto Networks NGFW (firewall) logs are ingested into the panw_ngfw_traffic_raw dataset in XSIAM. Querying this dataset returns the raw firewall log records you need.

Topics

#NGFW Logs#XQL Dataset#Data Ingestion#Palo Alto Networks

Community Discussion

No community discussion yet for this question.

Full XSIAM-ANALYST Practice