You can configure collecting Workday report data using a standard collector, content pack integration (onboarded prior to July 26, 2026), or connector:
| Collection Method | Description |
| ---------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Standard collector overview | Forward Workday report data to Cortex XSIAM using the Workday data source. |
| Link to standard collector instructions | [Ingest report data from Workday](workday/ingest-report-data-from-workday) |
| Links to content pack/integration details (onboarded prior to July 26, 2026) | <p>The <a href="https://cortex.marketplace.pan.dev/marketplace/details/Workday">Workday</a> content pack provides solutions for financial management, human resources, and planning, specifically supporting the collection and modeling of user activity audit logs and sign-on events. It contains classifiers, modeling rules, and parsing rules, as well as the following integrations:</p><ul><li><a href="https://xsoar.pan.dev/docs/reference/integrations/workday-event-collector">Workday Event Collector</a>: Use this integration containing the <strong><code>workday-get-activity-logging</code></strong> command to get activity logs from Workday. It requires the <strong><code>Workday Parsing Rule</code></strong> and <strong><code>Workday Modeling Rule</code></strong> for parsing and modeling ingested data.</li><li><a href="https://xsoar.pan.dev/docs/reference/integrations/workday">Workday</a>: Use this integration containing the <strong><code>workday-list-workers</code></strong> command to return information for specific workers.</li><li><a href="https://xsoar.pan.dev/docs/reference/integrations/workday-iam">Workday IAM</a>: Use this integration containing the <strong><code>workday-iam-get-full-report</code></strong> command to return report entries from Workday. It is part of the part of the IAM premium pack.</li><li><a href="https://xsoar.pan.dev/docs/reference/integrations/workday-sign-on-event-collector">Workday Sign On Event Collector</a>: Use this integration containing the <strong><code>workday-get-sign-on-events</code></strong> command to get sign-on logs from Workday. This command is used for developing/debugging and is to be used with caution, as it can create events, leading to events duplication and exceeding the API request limitation.</li></ul> |
| Link to connector | <ul><li><a href="workday/workday-automation-and-collection">Workday Automation and Collection</a> (onboarded after July 26, 2026)</li><li><a href="workday/workday">Workday</a></li></ul> |