Verify that all firewalls successfully pushed logs to the Cortex Data Lake for the last 12 hours. It's an easy way to do monitoring of the FW connection to CDL.
You can use either a manual list of FW serials or a Panorama integration to get the list of equipment to monitor.
PAN-OS to Strata Logging Service Monitoring
- Details
- Content
- Dependencies
- Version History
Monitor the PAN-OS FW log upload to the Strata Logging Service in a reoccurring job. The key pre-requisite is the configuration of the Strata Logging Service integration.
Automations
| Name | Description |
|---|---|
PANOStoCortexDataLakeMonitoring |
Incident Fields
| Name | Description |
|---|---|
fwserials | Comma separated list of PAN-OS Firewall serial numbers. |
panosintegrationinstancename | The name of the PAN-OS integration instance. |
Incident Types
| Name | Description |
|---|---|
PAN-OS logging to Cortex Data Lake - Action Required | |
Cortex Data Lake Monitoring |
Layouts
| Name | Description |
|---|---|
Cortex Data Lake Monitoring | |
PAN-OS logging to Cortex Data Lake - Action Required |
Playbooks
| Name | Description |
|---|---|
| PAN-OS to Strata Logging Service Monitoring - Cron Job | This playbook verifies that your FWs sent logs to the Strata Logging Service in the last 12 hours. An email notification will be sent if it's not the case. |
| PAN-OS logging to Strata Logging Service - Action Required | This Playbook initiates the steps needed to investigate the PAN-OS logging to Strata Logging Service problems. |
Required Content Packs (4)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Common Scripts | By: Cortex XSOAR |
| Strata Logging Service by Palo Alto Networks | By: Cortex XSOAR |
| PAN-OS by Palo Alto Networks | By: Cortex XSOAR |
Optional Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Common Types | By: Cortex XSOAR |
All level dependencies (8)
| Pack Name | Pack By |
|---|---|
| Filters And Transformers | By: Cortex XSOAR |
| Cortex REST API | By: Cortex XSOAR |
| Rasterize | By: Cortex XSOAR |
| PAN-OS by Palo Alto Networks | By: Cortex XSOAR |
| Strata Logging Service by Palo Alto Networks | By: Cortex XSOAR |
| Common Playbooks | By: Cortex XSOAR |
| Base | By: Cortex XSOAR |
| Common Scripts | By: Cortex XSOAR |
1.0.14 - 775948 (January 21, 2024)
PUBLISHER
PLATFORMS
Cortex XSOAR
INFO
| Supported By | Community | |
| Created | April 12, 2021 | |
| Last Release | January 21, 2024 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
