Collect Broker VM Logs - Learn more about collecting logs from a Broker VM to review them as part of an investigation. - Administrator Guide - Cortex XSIAM - Cortex CLOUD - Cortex - Security Operations

Cortex Cloud Posture Management Documentation

Product
Cortex Cloud Application Security > Cortex CLOUD
License
Cloud Posture Management
Creation date
2025-01-22
Last date published
2026-06-10
Category
Administrator Guide
Abstract

Learn more about collecting logs from a Broker VM to review them as part of an investigation.

Cortex Cloud enables you to collect your Broker VM logs directly from the Cortex Cloud management console.

You can collect logs by either regenerating the most up-to-date logs and downloading them once they are ready, or downloading the current logs from the last creation date reflected in the TIMESTAMP.

  1. Select SettingsConfigurationsData BrokerBroker VMs to view the Broker VMs table in the Brokers tab.

  2. Locate your Broker VM, right-click and select either Generate New Logs or Download Logs (<TIMESTAMP>).

    Note

    The Download Logs (<TIMESTAMP>) is only displayed when you’ve downloaded your logs previously using Generate New Logs.

    Logs are generated automatically, but can take up to a few minutes depending on the size of the logs.