Ingest, filter, and overlay change events - Cortex XCOR Documentation

Change events provide an additional layer of meaning to your telemetry data. Use the following documentation to learn about how to interact with change events in Palo Alto Networks Cortex XCOR.

Ingest

Cortex XCOR supports ingesting third-party events, which display as change events within Changes Explorer, and as change events on dashboards, traces, and services, and query results for monitors.

Ingest data

Filter

Learn how to filter change events in Changes Explorer to narrow your search focus and identify changes that matter when you’re trying to understand the root cause of an issue.

Filter data

Observe

On-call engineers can enable and overlay change events on panels in Cortex XCOR to provide additional context that helps correlate events with system and service anomalies, allowing for quicker identification of incident cause.

Observe data