> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/broker-vm-notifications.md).

# Broker VM notifications

To help you monitor your Broker VM version, connectivity, and high availability clusters, Cortex XDR sends notifications to your Cortex XDR console Notification Center.

Cortex XDR sends the following notifications:

<details>

<summary>Add Cluster</summary>

Notifies when a cluster was added.

</details>

<details>

<summary>Applet Activated</summary>

Notifies when an applet is activated on a cluster.

</details>

<details>

<summary>Applet configuration</summary>

Notifies when an applet on a cluster configuration was updated.

</details>

<details>

<summary>Applet Deactivated</summary>

Notifies when an applet is deactivates on a cluster.

</details>

<details>

<summary>Broker VM Connectivity</summary>

Notifies when the Broker VM has lost connectivity to Cortex XDR .

</details>

<details>

<summary>Broker VM Disk Usage</summary>

Notifies when the Broker VM is utilizing over 90% of the allocated disk space.

</details>

<details>

<summary>Cluster Configuration</summary>

* Notifies when a Broker VM node was added to a cluster.
* Notifies when a Broker VM node was removed from a cluster.
* Notifies when the configuration for the cluster needs to be set.

</details>

<details>

<summary>Cluster failover</summary>

* Notifies when a failover is initiated in the cluster from one Broker VM node to another.
* Notifies when a failover completed successfully. The Broker VM is now Primary in the cluster.
* Notifies when a failover in the cluster completed with errors and error message.
* Notifies when couldn't perform a failover in the cluster as there is no available standby node with sufficient redundancy.

</details>

<details>

<summary>Cluster health declined</summary>

* Notifies when failed to detect an available standby Broker VM node in the cluster.
* Notifies when critical errors detected in the cluster and there is no available standby Broker VM node for failover.

</details>

<details>

<summary>Cluster health recovered</summary>

Notifies when detected an available standby Broker VM node in the cluster.

</details>

<details>

<summary>Disk space allocation on broker</summary>

Notifies whether the disk space allocated for data caching in the Broker VM has been increased successfully. If not, the notification includes the errors encountered during the process. For more information on allocating disk space to the Broker VM, see [Increase Broker VM storage allocated for data caching](/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/manage-broker-vm/increase-broker-vm-storage-allocated-for-data-caching.md).

</details>

<details>

<summary>Broker VM requires a reboot</summary>

Notifies after a Broker VM update whether a broker needs a reboot to finish installing important updates.

</details>

<details>

<summary>New Broker VM Version</summary>

Notifies when a new Broker VM version has been released.

* If the Broker VM Auto Upgrade is disabled, the notification includes a link to the latest release information. It is recommend you upgrade to the latest version.
* If the Broker VM Auto Upgrade is enabled, 12 hours after the release you are notified of the latest upgrade, or you are notified that the upgrade failed. In such a case, open a Palo Alto Networks Support Ticket.

</details>

<details>

<summary>Reinstall Broker VM with a new image</summary>

For all brokers that were deployed with an old Broker VM image, downloaded prior to July 9th, 2023 (installed with Ubuntu 18.04 or earlier), the Broker VM must be reinstalled with a new image (installed with Ubuntu 20.04 or later) before upgrading to the latest version. The name of the Broker VM to upgrade is indicated with a link to the instructions.

{% hint style="info" %}

### Note

For more information on upgrading to a new Broker VM image, see [Learn more about migrating to the latest Broker VM image](/cortex-xdr-5.x/migrate-to-a-new-broker-vm-image/migrating-to-a-new-broker-vm-image.md).
{% endhint %}

</details>

<details>

<summary>Remove Cluster</summary>

Notifies when a cluster was removed.

</details>

To ensure you stay informed about Broker VM activity, you can also configure notification forwarding to forward your Broker audit logs to an email distribution list or Syslog server. For more information about the Broker VM audit logs, see Broker VM Activity in the Cortex XDR Administrator Guide.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x/cortex-xdr-3.x-documentation/data-management/broker-vm/broker-vm-notifications.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
