What license would be required for ingesting external logs from various vendors?
What license would be required for ingesting external logs from various vendors?
To ingest external logs from various vendors, a Cortex XDR Pro per TB license is required. This licensing model is tailored for handling large volumes of data, making it suitable for processing logs from multiple external sources.
From CXPAG: Ingesting logs and data requires a Cortex XDR Pro per GB license. They have now changed the name of the license to "Pro per GB license" instead of TB.
LICENSE TYPE: Ingesting Logs and Data from external sources requires a Cortex XDR Pro per GB license. To receive Syslog data from an external source, you must fi rst set up the Syslog Collector applet on a Broker VM within your network.