Hello all, when I try to forward logs from Panorama to Splunk I couldn't see the logs for the past 15 days. I wanna export these logs manually and add them to Splunk but even though I set the row limit on Panorama CSV to 1 million I still only see th
...
Hi All,
I want to know is there any built in configuration/settings/playbook or any module that helps to handle playbook error(error handling). Error/On Continue Task level error handling is not enough so i want if there is any integration issue or c
...
Hello everyone, I noticed that when a task in a playbook has an error or requires some sort of input, said task appears in the tab "Playbook Tasks" (attached an image for reference). I was wondering how XSOAR gets that specific information in that ta
...
Hi,
I am trying to integrate with our Microsoft Defender instance from Xsoar Cloud. Right now I am trying to create a playbook task to add an item to the Tenant Allow Block List (TABL). Looks like the only way is via Powershell. I have a script that
...
Hello, I'm trying to install our extra-small single server on-prem 8.9 XSOAR and ran into some confusion with the documentation. I didn't see a way to report the issue elsewhere so I thought it might be helpful here.
https://docs-cortex.paloaltonetwor
Hi Everyone!
I’m hoping you can aim me in the right direction.
I’m trying to join the PAN DFIR slack community via this url:https://start.paloaltonetworks.com/join-our-slack-community
But the register button doesn’t seem to work for me, despite m
...
Do sub-playbooks self loop on arrays or just lists?
I can get a sub-playbook to loop “for each input” of a list, but not an array of the same data.
Thx
How to troubleshoot the Prisma Access Browser Extension on Mac. please help me if Any one have any idea. I m trying to install PAB extension in chrome in MAC but it not reflect on chrome extension.
Hi Team,
Today, I received a new use case from my customer.
In their Prisma Access cloud-managed environment, we have configured SAML authentication for SSL VPN connectivity.
Now, the customer has a new requirement: one of their clients needs access
...
We’re trying to implement a full backup solution for a Panorama VM hosted in Azure, including all sensitive elements like auth credentials, private keys, and user passwords.
Here’s what we’ve found:
The XML API config export works, but it sanitizes
Hi Team,
How to check the Offloaded session in PAN-OS 10.1.11 ?
In the below image the session is offloaded ?
Hello everyone, I would like to ask how to get the user.name value from this context data.
I tried using the syntax ${incident.labels.user.name}, but it didn’t work.
Here's the context structure:
{ incident: { ... labels: { user.name: ...
The common factor is the r.cloudfront.net which I understand is the Amazon CDN. Any suggestions. I am awaiting TAC to do their troubleshooting. Going on second day. The logs show no blocks so far. The traffic is low risk as they .gov sites.
How do I setup a Custom Alert is IoT Security to detect a Raspberry pi device. I have the following vendor codes, and I want to setup a custom alert if a raspberry device connects to our network.
Vendor Codes
28:cd:c1
2c:cf:67
B8:27:be
D8:3a:dd
...
