PANOStoCortexDataLakeMonitoring

Verify that all firewalls successfully pushed logs to the Cortex Data Lake for the last 12 hours. It's an easy way to do monitoring of the FW connection to CDL. You can use either a manual list of FW serials or a Panorama integration to get the list of equipment to monitor.

python · PAN-OS to Strata Logging Service Monitoring

Details

ID	`PANOStoCortexDataLakeMonitoring`
Language	python
From Version	6.0.0
Docker Image	`demisto/python3:3.12.8.3296088`
Tags	CDL PAN-OS XDR

Source

PANOStoCortexDataLakeMonitoring.py PANOStoCortexDataLakeMonitoring_test.py PANOStoCortexDataLakeMonitoring.yml

Download History Raw

commonfields:
  id: PANOStoCortexDataLakeMonitoring
  version: -1
name: PANOStoCortexDataLakeMonitoring
args:
- description: Comma separated list of FW serial numbers to monitor.
  name: fw_serials
- description: PAN-OS integration instance name to retrieve Firewalls serials list.
  name: pan_os_integration_instance_name
comment: 'Verify that all firewalls successfully pushed logs to the Cortex Data Lake for the last 12 hours. It''s an easy way to do monitoring of the FW connection to CDL.

  You can use either a manual list of FW serials or a Panorama integration to get the list of equipment to monitor. '
dependson:
  must:
  - pan-os
  - cdl-query-traffic-logs
outputs:
- contextPath: CDL.monitoring.FirewallsWithLogsSent
  description: Firewall serials that sent logs to Crotex Data Lake.
  type: String
- contextPath: CDL.monitoring.FirewallsWithoutLogsSent
  description: Firewall serials that sent logs to Crotex Data Lake.
  type: String
runas: DBotWeakRole
script: ''
tags:
- CDL
- PAN-OS
- XDR
type: python
subtype: python3
dockerimage: demisto/python3:3.12.8.3296088
fromversion: 6.0.0
tests:
- No tests (auto formatted)