Documentation — August 23, 2026
433 files changed, 2127 insertions, 434 deletions — view the commit on the mirror.
A 431-page metadata and structure pass across Cortex XSIAM; UPN becomes a mandatory XDM authentication field
- 366 of the 434 changed files touch nothing but their
description:frontmatter — a metadata pass over almost the whole Cortex XSIAM book. - The XDM authentication mapping reference carries the day’s only substantive change:
xdm.source.user.upnis promoted from optional to mandatory, and a newOPERATION_TYPE_AUDITconstant is added. - Structural cleanup elsewhere: bold pseudo-headings promoted to real
###headings in 22 files, and “Note”/”Notice” sub-headings stripped from 14 callouts. - Five pages moved their numbered procedures into GitBook
{% stepper %}blocks. - Six pages were retitled. No page was added, removed, or moved — every one of the 434 entries is a modification.
Highlights
-
xdm.source.user.upn is now a mandatory XDM authentication field
It moved out of the collapsed "Authentication identity and context" optional section into the mandatory list as field 12, pushing xdm.event.outcome_reason to 13.
-
New XDM_CONST.OPERATION_TYPE_AUDIT constant for authorization and policy evaluation events
An accompanying note tells mappers there is no neutral member: leave the field unmapped when the kind is unclear, and unset for logouts, so logout events do not inflate login metrics.
-
409 pages gained or rewrote a description: frontmatter line
The new descriptions consistently name the product ("in Cortex XSIAM") where the old ones did not, and 366 pages changed in no other way.
-
Six pages were retitled without moving
"About health issues" became "Health issues in Cortex XSIAM", "Extract Indicators" became "Extract indicators in playbooks", and four others; the nav manifest records the new titles against unchanged paths, so no link or bookmark breaks.
-
Numbered procedures converted to GitBook stepper blocks on five pages
Registering an agent action and adding an integration instance both gained per-step headings in the process, but the steps themselves are unchanged.
-
Callout hints lost their redundant "Note" and "Notice" headings
Fourteen occurrences across nine pages, including three legacy data-gb-custom-block divs rewritten to the {% hint %} shorthand.
Bulk change — 433 files. Per-file diffs are not stored for a change this size; view it on the mirror.
Changes
433 files listed, 15 written up and shaded below.
-
▸ ▾ Import historical data into cold storage modified +4 −0
xsiam/configure-cortex-xsiam/data-management/archived-data/import-historical-data-into-cold-storageRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Success and failure code responses to your HTTP POST requests modified +4 −0
xsiam/configure-cortex-xsiam/data-management/archived-data/success-and-failure-code-responses-to-your-http-post-requestsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Broker VM modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vmRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Broker VM High Availability Cluster modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/broker-vm-high-availability-clusterRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Configure High Availability Cluster modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/broker-vm-high-availability-cluster/configure-high-availability-clusterRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Manage Broker VM clusters modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clustersRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Add applet to cluster modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/add-applet-to-clusterRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Add Broker VM to cluster modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/add-broker-vm-to-clusterRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Edit cluster modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/edit-clusterRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Remove cluster modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/remove-clusterRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ View cluster details modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/broker-vm-high-availability-cluster/manage-broker-vm-clusters/view-cluster-detailsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Broker VM notifications modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/broker-vm-notificationsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Manage Broker VM data collector applets modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm-data-collector-appletsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Manage Broker VM modified +6 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vmRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Add Broker VM to cluster modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/add-broker-vm-to-clusterRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Collect Broker VM Logs modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/collect-broker-vm-logsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Edit Broker VM Configuration modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/edit-broker-vm-configurationRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Import Broker VM Configuration modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/import-broker-vm-configurationRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Increase Broker VM storage allocated for data caching modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/increase-broker-vm-storage-allocated-for-data-cachingRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Monitor Broker VM using Prometheus modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/monitor-broker-vm-using-prometheusRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Open Live Terminal modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/open-live-terminalRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Remove from Cluster modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/remove-from-clusterRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Switchover Primary Node in Cluster modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/switchover-primary-node-in-clusterRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Update Broker VM applets independently modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/update-broker-vm-applets-independentlyRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Upgrade Broker VM modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/manage-broker-vm/upgrade-broker-vmRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Monitor Broker VM activity modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/monitor-broker-vm-activityRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Set up and configure Broker VM modified +12 −8
xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vmRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Broker VM data collector applets modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-data-collector-appletsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Broker VM image installations modified +6 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installationsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Set up Broker VM on Alibaba Cloud modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-alibaba-cloudRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Set up Broker VM on Amazon Web Services modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-amazon-web-servicesRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Set up Broker VM on Google Cloud Platform (GCP) modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-google-cloud-platform-gcpRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Set up Broker VM on KVM using Ubuntu modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-kvm-using-ubuntuRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Set up Broker VM on Microsoft Azure modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-microsoft-azureRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Set up Broker VM on Microsoft Hyper-V modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-microsoft-hyper-vRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Set up Broker VM on Nutanix Hypervisor modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-nutanix-hypervisorRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Set up Broker VM on VMware ESXi using vSphere Client modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/set-up-and-configure-broker-vm/broker-vm-image-installations/set-up-broker-vm-on-vmware-esxi-using-vsphere-clientRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Troubleshoot Broker VM applet errors modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/troubleshoot-broker-vm-applet-errorsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ What is the Broker VM? modified +4 −0
xsiam/configure-cortex-xsiam/data-management/broker-vm/what-is-the-broker-vmRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Configure Cortex Data Lake tier modified +1 −1
xsiam/configure-cortex-xsiam/data-management/configure-cortex-data-lake-tierRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Data Model Rules modified +1 −1
xsiam/configure-cortex-xsiam/data-management/data-model-rulesRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Create Data Model Rules modified +4 −0
xsiam/configure-cortex-xsiam/data-management/data-model-rules/create-data-model-rulesRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Data Model Rules editor views modified +4 −0
xsiam/configure-cortex-xsiam/data-management/data-model-rules/data-model-rules-editor-viewsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Data Model Rules file structure and syntax modified +4 −0
xsiam/configure-cortex-xsiam/data-management/data-model-rules/data-model-rules-file-structure-and-syntaxRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Field structure modified +4 −0
xsiam/configure-cortex-xsiam/data-management/data-model-rules/data-model-rules-file-structure-and-syntax/field-structureRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ MODEL modified +4 −0
xsiam/configure-cortex-xsiam/data-management/data-model-rules/data-model-rules-file-structure-and-syntax/modelRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ RULE modified +4 −0
xsiam/configure-cortex-xsiam/data-management/data-model-rules/data-model-rules-file-structure-and-syntax/ruleRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Data Model Rules notifications modified +4 −0
xsiam/configure-cortex-xsiam/data-management/data-model-rules/data-model-rules-notificationsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Generate data model rules with AI (preview) modified +4 −0
xsiam/configure-cortex-xsiam/data-management/data-model-rules/generate-data-model-rules-with-ai-previewRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ How to map authentication events for analytics modified +4 −0
xsiam/configure-cortex-xsiam/data-management/data-model-rules/how-to-map-authentication-story-eventsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Monitor Data Model Rules activity modified +4 −0
xsiam/configure-cortex-xsiam/data-management/data-model-rules/monitor-data-model-rules-activityRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Troubleshooting Data Model Rules modified +4 −0
xsiam/configure-cortex-xsiam/data-management/data-model-rules/troubleshooting-data-model-rulesRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Using data enrichment modified +4 −0
xsiam/configure-cortex-xsiam/data-management/data-model-rules/using-data-enrichmentRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Dataset management modified +1 −3
xsiam/configure-cortex-xsiam/data-management/dataset-managementRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Download JSON file of lookup dataset modified +4 −0
xsiam/configure-cortex-xsiam/data-management/dataset-management/download-json-file-of-lookup-datasetRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Import a lookup dataset modified +4 −0
xsiam/configure-cortex-xsiam/data-management/dataset-management/import-a-lookup-datasetRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Lookup datasets modified +4 −0
xsiam/configure-cortex-xsiam/data-management/dataset-management/lookup-datasetsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Monitor datasets and dataset views activity modified +4 −0
xsiam/configure-cortex-xsiam/data-management/dataset-management/monitor-datasets-and-dataset-views-activityRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Set time to live for lookup datasets modified +4 −0
xsiam/configure-cortex-xsiam/data-management/dataset-management/set-time-to-live-for-lookup-datasetsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ What are datasets? modified +4 −0
xsiam/configure-cortex-xsiam/data-management/dataset-management/what-are-datasetsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Manage compute units modified +1 −3
xsiam/configure-cortex-xsiam/data-management/manage-compute-unitsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Compute units usage modified +4 −0
xsiam/configure-cortex-xsiam/data-management/manage-compute-units/compute-units-usageRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Manage Event Forwarding modified +1 −3
xsiam/configure-cortex-xsiam/data-management/manage-event-forwardingRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Endpoints Event Forwarding - included/excluded fields by event type modified +4 −0
xsiam/configure-cortex-xsiam/data-management/manage-event-forwarding/endpoints-event-forwarding-included-excluded-fields-by-event-typeRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Create Parsing Rules modified +4 −0
xsiam/configure-cortex-xsiam/data-management/parsing-rules/create-parsing-rulesRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Parsing Rules editor views modified +4 −0
xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-editor-viewsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Parsing Rules file structure and syntax modified +4 −0
xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntaxRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ COLLECT modified +4 −0
xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/collectRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ CONST modified +4 −0
xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/constRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ EXTEND modified +4 −0
xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/extendRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ INGEST modified +4 −0
xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingestRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ parse_cef modified +5 −1
xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingest/parse_cefRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ parse_cisco modified +4 −0
xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingest/parse_ciscoRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ parse_json modified +5 −1
xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ingest/parse_jsonRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ RULE modified +4 −0
xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-file-structure-and-syntax/ruleRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Parsing Rules Raw Dataset modified +4 −0
xsiam/configure-cortex-xsiam/data-management/parsing-rules/parsing-rules-raw-datasetRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Troubleshooting Parsing rules errors modified +4 −0
xsiam/configure-cortex-xsiam/data-management/parsing-rules/troubleshooting-parsing-rules-errorsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Engines modified +3 −1
xsiam/configure-cortex-xsiam/enginesRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Configure engines modified +3 −5
xsiam/configure-cortex-xsiam/engines/configure-enginesRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Configure an engine to use custom certificates modified +4 −0
xsiam/configure-cortex-xsiam/engines/configure-engines/configure-an-engine-to-use-custom-certificatesRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Configure the engine to call the server without using a proxy modified +4 −0
xsiam/configure-cortex-xsiam/engines/configure-engines/configure-the-engine-to-call-the-server-without-using-a-proxyRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Configure the engine to use a web proxy modified +4 −0
xsiam/configure-cortex-xsiam/engines/configure-engines/configure-the-engine-to-use-a-web-proxyRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Use NGINX as a reverse proxy modified +4 −0
xsiam/configure-cortex-xsiam/engines/configure-engines/use-nginx-as-a-reverse-proxyRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Engine requirements modified +6 −4 Hardware, operating system and required-URL sections become real headings; the requirements themselves, including the CentOS 7 EOL notice, are untouched.
xsiam/configure-cortex-xsiam/engines/engine-requirementsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Install an engine modified +3 −1
xsiam/configure-cortex-xsiam/engines/install-an-engineRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Change the Docker Installation folder modified +4 −0
xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/change-the-docker-installation-folderRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Configure Docker pull rate limit modified +6 −0
xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/configure-docker-pull-rate-limitRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Docker FAQs modified +6 −0
xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-faqsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Docker hardening guide modified +4 −0
xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-hardening-guideRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Check Docker hardening configurations modified +4 −0
xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-hardening-guide/check-docker-hardening-configurationsRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Configure Docker images modified +4 −0
xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-hardening-guide/configure-docker-imagesRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Configure the CPU, PIDs, and open the file descriptors limit modified +6 −0
xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-hardening-guide/configure-the-cpu-pids-and-open-the-file-descriptors-limitRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Configure the memory limit support without swap capabilities modified +4 −0
xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-hardening-guide/configure-the-memory-limit-support-without-swap-capabilitiesRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Configure the memory limitation modified +4 −0
xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-hardening-guide/configure-the-memory-limitationRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Docker network hardening modified +6 −0
xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-hardening-guide/docker-network-hardeningRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Run Docker with non-root internal users modified +6 −0
xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-hardening-guide/run-docker-with-non-root-internal-usersRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Docker image security modified +1 −1
xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/docker-image-securityRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Install Docker distribution for Red Hat modified +3 −1
xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/install-docker-distribution-for-red-hatRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Install Docker modified +1 −1
xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/install-dockerRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.
-
▸ ▾ Troubleshoot Docker Issues modified +6 −0
xsiam/configure-cortex-xsiam/engines/install-an-engine/docker/troubleshoot-docker-issuesRead it on the Cortex docs portal ↗ Read it here → This file's diff on GitHub ↗
Diffs are not stored for a change this size — view it on the mirror.