Skip to main content

PaloAlto Cortex XDR

PaloAlto Cortex XDR is an application template in the Endpoint Management category of the Application Catalog. Its card describes it as PaloAlto Cortex XDR integration. Installing it from the form below adds an application to Applications. Its template ID, CortexXDR, is the one listed on Application Templates.

Menu path: Applications → Install Application → PaloAlto Cortex XDR · URL path: /v2/applications/install?template=CortexXDR

Task guide: PaloAlto Cortex XDR

Install PaloAlto Cortex XDR form with the Application section's Instance name and Display name fields, the Configuration section's Tenant API base URL, API Key ID, AuthMode and The API Key fields, and Advanced configuration expanded to datalake and datalake index name, above Cancel, Dry run and Install Application

Application​

The two fields every install form starts with: Instance name names this installation in its URL, and Display name is shown for it on Applications and its details page.

FieldTypeRequiredDefault
Instance nameTextYesdefault
Display nameTextYesDefault

Configuration​

FieldTypeRequiredDefault
Tenant API base URLTextYes-
API Key IDTextYes-
AuthModeTextYesadvanced
The API KeyPasswordYes-

Advanced configuration​

Collapsed when the form opens; click its heading to show the data lake the application writes to.

FieldTypeRequiredDefault
datalakeTextYesmanaged
datalake index nameTextYesCortex

Install​

Install Application installs PaloAlto Cortex XDR with the values in the form; Dry run checks them first, without installing (see Dry run); Cancel returns to the catalog without installing. Every template's form shares the shape described under Install Form.

Last updated on