> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources.md).

# Vendor-specific data sources and connectors

Cortex Data Security enables you to ingest data from a wide range of third-party vendors and security services. For many popular vendors, you can choose between distinct types of ingestion methods to fit your organizational needs:

* Connectors
* Standard data sources (also called data collectors)
* Cloud Service Provider (CSP) onboarding data sources

In some cases, the same vendor is available through multiple options. Check the available descriptions for each entry in both the user interface and documentation to decide which option is more suitable for your needs.

| Data Source Type                                    | Primary Use                                      | Configuration Method                                                                                         | Cortex Cloud Features                                                                                         | Recommendation                                                                                         |
| --------------------------------------------------- | ------------------------------------------------ | ------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------ |
| Connector                                           | Unified integration for all vendor capabilities. | Configured on the **Data Sources & Integrations** page using a unified wizard.                               | Includes data ingestion, parsing, normalization, plus built-in commands, automations, and posture management. | Recommended approach for all supported vendors. Choose this for a streamlined, multi-capability setup. |
| Standard data source (also called data collectors)  | Ingesting raw logs and events.                   | Configured in the Data Sources & Integrations page using the Data Source Onboarder.                          | Limited to data ingestion, parsing, and normalization.                                                        | Choose this if you only need raw data ingestion for a service not yet covered by a unified connector.  |
| Cloud Service Provider (CSP) onboarding data source | Ingest cloud assets                              | Configured in the Data Sources & Integrations page using the cloud service provider (CSP) onboarding wizard. | Facilitates seamless setup of CSP data, such as AWS, Azure, GCP, and OCI, with minimal user input.            | Choose this for streamlined discovery and security posture management of your cloud environments.      |

### Third-party vendor list

Cortex Data Security provides specific documentation for each vendor to help you choose and configure the right connection. To ensure you have a single, unified reference point, the vendors are listed in alphabetical order and includes every supported vendor, regardless of the data source group connector, such as the Broker VM or CSP Onboarding.

#### Keep in mind the following:

* **Unique connector names**: Each connector has its own unique name. Even if multiple connectors exist for a single vendor, they will be clearly labeled to distinguish their capabilities.
* **Licensing requirements**: Availability of specific connectors, capabilities, and sub-capabilities is determined by your tenant license. You will only see and be able to onboard services supported by your active license.
* **Consolidated management**: Regardless of whether you are using a traditional data source or a new unified connector, all active instances are managed from the **Data Sources & Integrations** page.

***


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/data-security-documentation/cortex-data-security-data-sources-and-connectors/vendor-specific-data-sources.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.