Cortex XDR Vendor Agnostic Pro: This license is designed to handle logs from various vendors, suggesting that it supports ingestion of diverse external logs.
Cortex XDR Pro per TB: This license is based on the volume of data (per terabyte), which is suitable for high volumes of log data but may not specifically address the vendor-agnostic nature.
If the key factor is the volume of data rather than the specific sources of the logs, Cortex XDR Pro per TB would indeed be a better choice, but the question is clear: "for ingesting external logs from VARIOUS VENDORS".
I will go for "B" on this.
LICENSE TYPE:
Ingesting Logs and Data from external sources requires a Cortex XDR Pro per GB license.
To receive Syslog data from an external source, you must fi rst set up the Syslog Collector applet on a Broker VM within your network.
From CXPAG: Ingesting logs and data requires a Cortex XDR Pro per GB license.
They have now changed the name of the license to "Pro per GB license" instead of TB.
upvoted 2 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
danups
4 months, 2 weeks agodanups
4 months, 2 weeks agoChiquitabandita
10 months, 1 week ago9smiles
1 year, 4 months ago