Snowflake

Configure the Snowflake data source and connector for Cortex XSIAM.

You can configure collecting Snowflake data using a Cloud Posture and Runtime Security data source or connector (onboarded after July 26, 2026):

Collection Method	Description
Cloud Posture and Runtime Security data source overview	Forward Snowflake data to Cortex XSIAM using the Snowflake data source.
Link to Cloud Posture and Runtime Security data source instructions	How to onboard Snowflake
Link to connector (onboarded after July 26, 2026)	Snowflake Automation and Collection