Skip to main content
After ingesting data , use Logs Explorer to verify that Palo Alto Networks Cortex XCOR is receiving log data.
  1. In the navigation menu select Explorers > Logs Explorer.
  2. On the Logs Explorer page, select a time window that includes the period when Cortex XCOR started ingesting log data. The timeline graph displays a spike at the time when Cortex XCOR started ingesting log data.
  3. Verify the message, timestamp, service, and severity fields are being assigned correctly. If these fields aren’t mapped in the way you intended, contact Cortex XCOR Support.