Ingest endpoint data

Cortex XDR enables you to ingest endpoint data.

Notice

Ingestion of logs and data requires a Cortex XDR Pro per GB license.

Cortex XDR enables you to ingest endpoint data.

Note

Cortex XDR does not support ingestion of EDR data from third party vendors. Consider upgrading to Cortex XSIAM in order to ingest EDR data from third party vendors.

The following endpoint data can be ingested by Cortex XDR:

• Windows Events and other data using other Broker VM data collector applets