Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks XSIAM-Engineer Exam - Topic 2 Question 16 Discussion

An application which ingests custom application logs is hosted in an on-premises virtual environment on an Ubuntu server, and it logs locally to a .csv file.Which set of actions will allow the ingestion of the .csv logs into Cortex XSIAM directly from the server?An application which ingests custom application logs is hosted in an on-premises virtual environment on an Ubuntu server, and it logs locally to a .csv file.Which set of actions will allow the ingestion of the .csv logs into Cortex XSIAM directly from the server?
A) Install a Broker VM in the environment, and configure the CSV Collector to collect the files of interest.
B) Install a Cortex XDR agent on the Ubuntu server, and configure the agent to collect the files of interest.
C) Install a Broker VM in the environment, and migrate the application to the Broker VM.
D) Install XDR Collector on the Ubuntu server, and configure the agent to collect the files of interest.

Palo Alto Networks XSIAM-Engineer Exam - Topic 2 Question 16 Discussion

Actual exam question for Palo Alto Networks's XSIAM-Engineer exam
Question #: 16
Topic #: 2
[All XSIAM-Engineer Questions]

An application which ingests custom application logs is hosted in an on-premises virtual environment on an Ubuntu server, and it logs locally to a .csv file.

Which set of actions will allow the ingestion of the .csv logs into Cortex XSIAM directly from the server?

An application which ingests custom application logs is hosted in an on-premises virtual environment on an Ubuntu server, and it logs locally to a .csv file.

Which set of actions will allow the ingestion of the .csv logs into Cortex XSIAM directly from the server?

Show Suggested Answer Hide Answer
Suggested Answer: A

The correct approach is to install a Broker VM in the environment and configure its CSV Collector applet to ingest the .csv log files directly from the Ubuntu server. This enables secure ingestion of custom application logs into Cortex XSIAM without modifying the application or requiring an XDR agent on the server.


by Ressie at Jul 01, 2026, 11:08 AM

Limited Time Offer

25%

Off

Get Premium XSIAM-Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Audry
1 day ago
Wait, we can ingest logs directly from a .csv? That's cool!
upvoted 0 times
...
Josphine
7 days ago
D) sounds interesting, but can it handle large files?
upvoted 0 times
...
Jarvis
12 days ago
C) is unnecessary, just collect the logs where they are!
upvoted 0 times
...
Halina
17 days ago
I think B) could work too, but not sure about the setup.
upvoted 0 times
...
Makeda
22 days ago
A) seems like the best option for direct ingestion.
upvoted 0 times
...
Luis
27 days ago
I feel like option D could be a good fit since it mentions installing an XDR Collector, but I can't recall if it specifically supports CSV files.
upvoted 0 times
...
Arlette
1 month ago
I’m a bit confused about option C. Migrating the application to the Broker VM seems unnecessary if we can just collect the logs directly.
upvoted 0 times
...
Louvenia
1 month ago
I remember practicing a similar question where we had to configure agents for log collection. Option B might be the way to go, but I need to double-check the specifics.
upvoted 0 times
...
Myra
1 month ago
I think option A sounds familiar since we discussed setting up a Broker VM in class, but I'm not entirely sure if it's the right choice for CSV files.
upvoted 0 times
...

Save Cancel