Collect prompt logs - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR 5.x Documentation

Product
Cortex XDR
License
XDR + Cloud
Creation date
2025-07-13
Last date published
2026-06-11
Category
Administrator Guide

Cortex XDR collects prompt logs from your cloud accounts using existing data collectors. Currently, AWS and Azure are supported by Cortex XDR for prompt log collection. At this time, GCP does not have a storage solution for AI prompts that allows Cortex XDR to ingest them.

For details on dataset retention, see Cortex XSIAM product licenses.Cortex XSIAM product licenses

Follow these procedures to enable prompt log collection in AWS and Azure: