Broker VM Notifications - Administrator Guide - Cortex XDR - Cortex XSIAM - Cortex - Security Operations

Cortex XDR Pro Administrator Guide

Product
Cortex XDR
License
Pro
Creation date
2023-03-27
Last date published
2023-03-27

To help you monitor your broker VM version and connectivity effectively, Cortex XDR sends notifications to your Cortex XDR console Notification Center.

Cortex XDR sends the following notifications:

  • New Broker VM Version—Notifies when a new broker VM version has been released.

    • If the broker VM Auto Upgrade is disabled, the notification includes a link to the latest release information. It is recommend you upgrade to the latest version.

    • If the broker VM Auto Upgrade is enabled, 12 hours after the release you are notified of the latest upgrade, or your are notified that the upgrade failed. In such a case, open a Palo Alto Networks Support Ticket.

  • Broker VM Connectivity—Notifies when the broker VM has lost connectivity to Cortex XDR .

  • Broker VM Disk Usage—Notifies when the broker VM is utilizing over 90% of the allocated disk space.

To ensure you and your colleagues stay informed about broker VM activity, you can also Configure Notification Forwarding to forward your Broker audit logs to an email distribution list or Syslog server. For more information about the broker VM audit logs, see Monitor Broker VM Activity.