Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks XSIAM-Engineer Exam - Topic 2 Question 16 Discussion

An application which ingests custom application logs is hosted in an on-premises virtual environment on an Ubuntu server, and it logs locally to a .csv file.Which set of actions will allow the ingestion of the .csv logs into Cortex XSIAM directly from the server?An application which ingests custom application logs is hosted in an on-premises virtual environment on an Ubuntu server, and it logs locally to a .csv file.Which set of actions will allow the ingestion of the .csv logs into Cortex XSIAM directly from the server?
A) Install a Broker VM in the environment, and configure the CSV Collector to collect the files of interest.
B) Install a Cortex XDR agent on the Ubuntu server, and configure the agent to collect the files of interest.
C) Install a Broker VM in the environment, and migrate the application to the Broker VM.
D) Install XDR Collector on the Ubuntu server, and configure the agent to collect the files of interest.

Palo Alto Networks XSIAM-Engineer Exam - Topic 2 Question 16 Discussion

Actual exam question for Palo Alto Networks's XSIAM-Engineer exam
Question #: 16
Topic #: 2
[All XSIAM-Engineer Questions]

An application which ingests custom application logs is hosted in an on-premises virtual environment on an Ubuntu server, and it logs locally to a .csv file.

Which set of actions will allow the ingestion of the .csv logs into Cortex XSIAM directly from the server?

An application which ingests custom application logs is hosted in an on-premises virtual environment on an Ubuntu server, and it logs locally to a .csv file.

Which set of actions will allow the ingestion of the .csv logs into Cortex XSIAM directly from the server?

Show Suggested Answer Hide Answer
Suggested Answer: A

The correct approach is to install a Broker VM in the environment and configure its CSV Collector applet to ingest the .csv log files directly from the Ubuntu server. This enables secure ingestion of custom application logs into Cortex XSIAM without modifying the application or requiring an XDR agent on the server.


by Ressie at Jul 01, 2026, 11:08 AM

Limited Time Offer

25%

Off

Get Premium XSIAM-Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Shawnta
1 hour ago
B is good, but I prefer A for simplicity.
upvoted 0 times
...
Charisse
5 days ago
But what about option B? Cortex XDR agent could work too.
upvoted 0 times
...
Ty
10 days ago
I agree, A seems straightforward for log collection.
upvoted 0 times
...
Albert
16 days ago
I think option A is the best choice. Broker VM sounds solid.
upvoted 0 times
...
Erick
21 days ago
I think A) is the best option here, straightforward setup.
upvoted 0 times
...
Lonny
26 days ago
D) is interesting, but can it handle large logs?
upvoted 0 times
...
Katlyn
1 month ago
Wait, why migrate to a Broker VM? Seems unnecessary.
upvoted 0 times
...
Annalee
1 month ago
B) is a solid choice too, agents are reliable.
upvoted 0 times
...
Mammie
1 month ago
A) sounds right, Broker VM is key.
upvoted 0 times
...
Audry
2 months ago
Wait, we can ingest logs directly from a .csv? That's cool!
upvoted 0 times
...
Josphine
2 months ago
D) sounds interesting, but can it handle large files?
upvoted 0 times
...
Jarvis
2 months ago
C) is unnecessary, just collect the logs where they are!
upvoted 0 times
...
Halina
2 months ago
I think B) could work too, but not sure about the setup.
upvoted 0 times
...
Makeda
2 months ago
A) seems like the best option for direct ingestion.
upvoted 0 times
...
Luis
2 months ago
I feel like option D could be a good fit since it mentions installing an XDR Collector, but I can't recall if it specifically supports CSV files.
upvoted 0 times
...
Arlette
3 months ago
I’m a bit confused about option C. Migrating the application to the Broker VM seems unnecessary if we can just collect the logs directly.
upvoted 0 times
...
Louvenia
3 months ago
I remember practicing a similar question where we had to configure agents for log collection. Option B might be the way to go, but I need to double-check the specifics.
upvoted 0 times
...
Myra
3 months ago
I think option A sounds familiar since we discussed setting up a Broker VM in class, but I'm not entirely sure if it's the right choice for CSV files.
upvoted 0 times
...

Save Cancel