PingFederate

Configure on-premises data collection for Cortex XDR.

You can configure collecting PingFederate authentication logs using a Broker VM Syslog Collector applet:

PingFederate vendor	Description
Syslog Collector applet overview	Forward authentication logs from PingFederate to Cortex XSIAM using the Broker VM Syslog Collector applet in a CEF format.
Link to Syslog Collector applet instructions	Ingest authentication logs from PingFederate