Turn your existing data & APIs into governed capabilities for AI →

API Learnings

Toolbox

API Evangelist LLC

palo-alto-networks

Cortex XSIAM API

A REST API for Cortex XSIAM, the AI-driven security operations platform that combines SIEM, XDR, SOAR, and ASM capabilities. The API provides endpoints for incident management, alert handling, data ingestion configuration, XQL query execution, asset management, and automation rule management. Shares endpoint patterns with Cortex XDR but includes additional capabilities for log collection configuration, data model management, and AI-assisted investigation.

Documentation GitHub OpenAPI

Documentation

https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM-REST-API

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR-REST-API/Get-Started-with-APIs

Specifications

openapi/palo-alto-cortex-xsiam-api-openapi-original.yml

asyncapi/palo-alto-cortex-xsiam-data-ingestion-asyncapi-original.yml

json-ld/palo-alto-cortex-xsiam-api-context.jsonld

json-ld/palo-alto-cortex-xsiam-data-ingestion-context.jsonld

Schemas & Data

json-schema/cortex-xsiam-api-alert-schema.json

json-schema/cortex-xsiam-api-asset-schema.json

json-schema/cortex-xsiam-api-audit-log-schema.json

json-schema/cortex-xsiam-api-endpoint-schema.json

json-schema/cortex-xsiam-api-filter-schema.json

json-schema/cortex-xsiam-api-incident-schema.json

json-schema/cortex-xsiam-api-sort-order-schema.json

json-schema/cortex-xsiam-data-ingestion-event-data-payload-schema.json

json-schema/cortex-xsiam-data-ingestion-log-data-payload-schema.json

json-schema/cortex-xsiam-data-ingestion-xdr-data-payload-schema.json

json-structure/cortex-xsiam-api-alert-structure.json

json-structure/cortex-xsiam-api-asset-structure.json

json-structure/cortex-xsiam-api-audit-log-structure.json

json-structure/cortex-xsiam-api-endpoint-structure.json

json-structure/cortex-xsiam-api-filter-structure.json

json-structure/cortex-xsiam-api-incident-structure.json

json-structure/cortex-xsiam-api-sort-order-structure.json

json-structure/cortex-xsiam-data-ingestion-event-data-payload-structure.json

json-structure/cortex-xsiam-data-ingestion-log-data-payload-structure.json

json-structure/cortex-xsiam-data-ingestion-xdr-data-payload-structure.json

Examples

examples/cortex-xsiam-api-alert-example.json

examples/cortex-xsiam-api-asset-example.json

examples/cortex-xsiam-api-audit-log-example.json

examples/cortex-xsiam-api-endpoint-example.json

examples/cortex-xsiam-api-filter-example.json

examples/cortex-xsiam-api-incident-example.json

examples/cortex-xsiam-api-sort-order-example.json

examples/cortex-xsiam-data-ingestion-event-data-payload-example.json

examples/cortex-xsiam-data-ingestion-log-data-payload-example.json

examples/cortex-xsiam-data-ingestion-xdr-data-payload-example.json

OpenAPI

#AI-Driven SOC #Automation #Security Analytics #SIEM #XDR

← Back to C APIs