For the complete documentation index, see llms.txt. This page is also available as Markdown.
Cortex AgentiX

What is the data source and connector catalog?

Learn more about the complete data source and connector catalog available in Cortex AgentiX.

The complete data source catalog for Cortex AgentiX is a conceptual grouping that is comprised of all configuration points available for data ingestion across Cortex AgentiX. It represents the aggregate of every integration method, from vendor-specific connectors to specialized Marketplace integrations.

The catalog is best understood by categorizing ingestion methods into the following core groups. By consulting the specific documentation sections dedicated to each category as detailed below, you gain a complete overview of all available ingestion options that collectively form the data source and connector catalog.

Vendor-specific data sources and connectors

This section includes integrations for specific third-party security and IT products. These include:

  • Connectors: The strategic, unified experience that allows you to manage security capabilities through a single configuration wizard.

  • Standard data collectors: Traditional built-in API and file-based collection functionalities.

Access to specific connectors depends on your license and tenant onboarding date. For more information, see What are Cortex AgentiX Data Sources and Connectors?. Configured on the Data Sources & Integrations page.

Marketplace content packs (integrations)

Packages that offer rich security content, often including a collection integration for data ingestion alongside automation components.

  • New Tenants: For tenants onboarded after July 26, 2026, standalone Marketplace integrations managed by Palo Alto Networks that have been consolidated into unified connectors are hidden from the catalog. These integrations are managed as sub-capabilities within the relevant vendor connector on the Data Sources & Integrations page. Partner and community-contributed integrations remain visible and available as standalone packs in the Marketplace catalog.

  • Existing Tenants: Continue to use Marketplace integrations for services not yet migrated to the connector framework for your account. These are installed from Settings → Configurations → Marketplace and configured using the Data Source Onboarder on the Data Sources & Integrations page.

Palo Alto Networks integrations

These integrations include both traditional data sources and new unified connectors to ensure deep telemetry ingestion and seamless cross-platform orchestration across the Palo Alto Networks security stack, such as Next-Generation Firewall and Prisma Access, configured on the Data Sources & Integrations page.

Last updated

Was this helpful?