# Welcome to the Docs!

This supporting add-on comes with prebuilt content for Palo Alto Networks Cortex XDR data to be easily used with Splunk Enterprise Security's Asset database. This documentation will cover the components used in the add-on and advanced configurations.

Disclaimer

This Splunk Supporting Add-on is not affiliated with Palo Alto Networks and is not sponsored or sanctioned by the Palo Alto Networks team. Please visit https://www.paloaltonetworks.com/ for more information about Palo Alto Networks.

# Assumptions

This documentation assumes the following:

1. You have a working Splunk Enterprise Security environment. This add-on is not intended to work without Splunk ES.
2. You already have Palo Alto Networks Cortex XDR data ingested using the Palo Alto Cortex XDR Endpoint Retriever .
3. Familiarity with setting up a new Asset source in Enterprise Security.

# About