Welcome to the new Splunkbase! To return to the old Splunkbase, click here.
CCX Palo Alto Cortex XDR (CEF) app icon

CCX Palo Alto Cortex XDR (CEF)

About Us: CyberCX is Australia’s greatest force of cyber security experts. Our highly skilled professional services team operates a 24x7 on-shore security operations centre (SOC) servicing corporate and public sector organisations across Australia and New Zealand, specialising in Security Operations services leveraging Splunk.

splunk product badge

Latest Version 1.0.2
August 29, 2025
Compatibility
Not Available
Platform Version: 10.0, 9.4, 9.3, 9.2, 9.1
CIM Version: 6.x, 5.x
Rating

0

(0)

Log in to rate this app
Support
CCX Palo Alto Cortex XDR (CEF) support icon
Not Supported
About Us: CyberCX is Australia’s greatest force of cyber security experts. Our highly skilled professional services team operates a 24x7 on-shore security operations centre (SOC) servicing corporate and public sector organisations across Australia and New Zealand, specialising in Security Operations services leveraging Splunk. Description: The CCX Palo Alto Cortex XDR looks to provide a single field extraction bundle for Palo Alto Cortex XDR Syslog (CEF). This TA was built using a large dataset and endeavours to be the most CIM compliant comprehensive field extraction TA available for Palo Alto Cortex XDR ingested logs from Cortex Data Lake to a Syslog Server. Fully compatible with Splunk Enterprise and Splunk Cloud, built by an Ops team for Ops teams. Features: - This TA currently supports logtypes tagged under the following CIM datamodels: Network Traffic, Change, Malware, Alerts, and Intrusion Detection (IDS). - Log ingestion from Cortex Data Lake to a Syslog Server requirements on Palo Alto TECHDOCS link below: https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-log-forwarding-app/forward-logs-from-logging-service-to-syslog-server

Categories

Created By

Henrique Linsmeyer

Type

addon

Downloads

807

Resources

Log in to report this app listing