[](https://www.paloaltonetworks.com/?ts=markdown) * [](https://www.paloaltonetworks.com/?ts=markdown) * Products Products AI Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-AIRS-logo-nav.svg)](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) [AI Security Platform](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Gateway](https://www.paloaltonetworks.com/ai-security/ai-gateway?ts=markdown) * [AI Model Security](https://www.paloaltonetworks.com/ai-security/ai-model-security?ts=markdown) * [AI Red Teaming](https://www.paloaltonetworks.com/ai-security/ai-red-teaming?ts=markdown) * [AI Runtime Security](https://www.paloaltonetworks.com/ai-security/ai-runtime-security?ts=markdown) * [Agent Security](https://www.paloaltonetworks.com/ai-security/agent-security?ts=markdown) * [AI Posture Management](https://www.paloaltonetworks.com/prisma/cloud/ai-spm?ts=markdown) Secure GenAI Tools * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) Network Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/strata-logo-nav.svg)](https://www.paloaltonetworks.com/network-security?ts=markdown) [Secure the Network](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [Quantum Safe Security](https://www.paloaltonetworks.com/network-security/quantum-safe-security?ts=markdown) * [Next-Gen Trust Security](https://www.paloaltonetworks.com/network-security/next-gen-trust-security?ts=markdown) * [OT / Industrial Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [Device \& IoT Security](https://www.paloaltonetworks.com/network-security/device-security?ts=markdown) * [5G Security](https://www.paloaltonetworks.com/network-security/5g-security?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) [Cloud-Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Advanced IP Defense](https://www.paloaltonetworks.com/network-security/advanced-ip-defense?ts=markdown) SASE [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-sase-logo-nav.svg)](https://www.paloaltonetworks.com/sase?ts=markdown) [Secure Access (SASE)](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma Access (ZTNA)](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) Security Operations [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-logo-nav.svg)](https://www.paloaltonetworks.com/cortex?ts=markdown) [Security Operations](https://www.paloaltonetworks.com/cortex?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Extended Detection \& Response](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Security Orchestration \& Automation](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Attack Surface Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Exposure Management](https://www.paloaltonetworks.com/cortex/exposure-management?ts=markdown) * [Email Security](https://www.paloaltonetworks.com/cortex/advanced-email-security?ts=markdown) * [Threat Intelligence Management](https://www.paloaltonetworks.com/cortex/threat-intel-management?ts=markdown) * [Agentic-first Automation](https://www.paloaltonetworks.com/cortex/agentix?ts=markdown) * [Identity Threat Detection and Response](https://www.paloaltonetworks.com/cortex/itdr?ts=markdown) [Endpoint Security](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Endpoint Protection](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) * [Ransomware Protection](https://www.paloaltonetworks.com/cortex/ransomware-protection?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/cortex/digital-forensics?ts=markdown) [Data Security](https://www.paloaltonetworks.com/cortex/data-security?ts=markdown) Cloud Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-cloud-logo-nav.svg)](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [Application Security Overview](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Application Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/application-security-posture-management?ts=markdown) * [Software Supply Chain Security](https://www.paloaltonetworks.com/cortex/cloud/software-supply-chain-security?ts=markdown) * [Infrasture-as-Code (IaC) Security](https://www.paloaltonetworks.com/cortex/cloud/infrastructure-as-code-security?ts=markdown) * [Software Composition Analysis](https://www.paloaltonetworks.com/cortex/cloud/software-composition-analysis?ts=markdown) * [Secrets Security](https://www.paloaltonetworks.com/cortex/cloud/secrets-security?ts=markdown) * [Open Partner Ecosystem](https://www.paloaltonetworks.com/cortex/cloud/appsec-partner-ecosystem?ts=markdown) [Cloud Posture Security Overview](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-security-posture-management?ts=markdown) * [Cloud Infrastructure Entitlement Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-infrastructure-entitlement-management?ts=markdown) * [Data Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/data-security-posture-management?ts=markdown) * [AI Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/ai-security-posture-management?ts=markdown) * [Vulnerability Management](https://www.paloaltonetworks.com/cortex/cloud/vulnerability-management?ts=markdown) * [Cloud Attack Surface Management](https://www.paloaltonetworks.com/cortex/cloud/attack-surface-management?ts=markdown) [Cloud Runtime Security Overview](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Cloud Detection and Response](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown) * [Container \& Kubernetes Security](https://www.paloaltonetworks.com/cortex/cloud/kubernetes-and-container-security?ts=markdown) * [Cloud Workload Protection](https://www.paloaltonetworks.com/cortex/cloud/cloud-workload-protection?ts=markdown) * [API Security](https://www.paloaltonetworks.com/cortex/cloud/api-security?ts=markdown) * [Serverless Security](https://www.paloaltonetworks.com/cortex/cloud/serverless-security?ts=markdown) Identity Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/idira-logo-nav.svg)](https://www.paloaltonetworks.com/idira?ts=markdown) [Human Identities](https://www.paloaltonetworks.com/idira/human?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) [Machine Identities](https://www.paloaltonetworks.com/idira/machine?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) [See All Products](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [![Overview icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Overview](#products-panel-0) * [![AI Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-prisma-blue.svg) AI Security](#products-panel-1) * [![Network Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-strata.svg) Network Security](#products-panel-2) * [![SASE icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-prisma-blue.svg) SASE](#products-panel-3) * [![Security Operations icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Security Operations](#products-panel-4) * [![Cloud Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Cloud Security](#products-panel-5) * [![Identity Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-idira.svg) Identity Security](#products-panel-6) [See All Products](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) [![AI Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-AIRS-logo-nav.svg) AI Security Discover, assess and protect AI apps, agents and employee use of GenAI tools](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) [![Network Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/strata-logo-nav.svg) Network Security AI-powered NetSec with next-gen firewalls, inline defense and unified management](https://www.paloaltonetworks.com/network-security?ts=markdown) [![Security Operations icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-logo-nav.svg) Security Operations Stop cyberattackers with the industry's premier platform for autonomous security operations](https://www.paloaltonetworks.com/cortex?ts=markdown) [![SASE icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-sase-logo-nav.svg) SASE Protect with AI, secure AI use and operate with AI using agentic Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) [![Identity Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/idira-logo-nav.svg) Identity Security Identity security platform to secure every identity: human, machine and agentic](https://www.paloaltonetworks.com/idira?ts=markdown) [![Cloud Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-cloud-logo-nav.svg) Cloud Security Prevent risks from code to cloud with the leading agentic cloud security platform](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [![AI Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-AIRS-logo-nav.svg)](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) [AI Security Platform](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Gateway](https://www.paloaltonetworks.com/ai-security/ai-gateway?ts=markdown) * [AI Model Security](https://www.paloaltonetworks.com/ai-security/ai-model-security?ts=markdown) * [AI Red Teaming](https://www.paloaltonetworks.com/ai-security/ai-red-teaming?ts=markdown) * [AI Runtime Security](https://www.paloaltonetworks.com/ai-security/ai-runtime-security?ts=markdown) * [Agent Security](https://www.paloaltonetworks.com/ai-security/agent-security?ts=markdown) * [AI Posture Management](https://www.paloaltonetworks.com/prisma/cloud/ai-spm?ts=markdown) Secure GenAI Tools * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) [![Network Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/strata-logo-nav.svg)](https://www.paloaltonetworks.com/network-security?ts=markdown) [Secure the Network](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [Quantum Safe Security](https://www.paloaltonetworks.com/network-security/quantum-safe-security?ts=markdown) * [Next-Gen Trust Security](https://www.paloaltonetworks.com/network-security/next-gen-trust-security?ts=markdown) * [OT / Industrial Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [Device \& IoT Security](https://www.paloaltonetworks.com/network-security/device-security?ts=markdown) * [5G Security](https://www.paloaltonetworks.com/network-security/5g-security?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) [Cloud-Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Advanced IP Defense](https://www.paloaltonetworks.com/network-security/advanced-ip-defense?ts=markdown) [![SASE logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-sase-logo-nav.svg)](https://www.paloaltonetworks.com/sase?ts=markdown) [Secure Access (SASE)](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma Access (ZTNA)](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) [![Security Operations logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-logo-nav.svg)](https://www.paloaltonetworks.com/cortex?ts=markdown) [Security Operations](https://www.paloaltonetworks.com/cortex?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Extended Detection \& Response](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Security Orchestration \& Automation](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Attack Surface Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Exposure Management](https://www.paloaltonetworks.com/cortex/exposure-management?ts=markdown) * [Email Security](https://www.paloaltonetworks.com/cortex/advanced-email-security?ts=markdown) * [Threat Intelligence Management](https://www.paloaltonetworks.com/cortex/threat-intel-management?ts=markdown) * [Agentic-first Automation](https://www.paloaltonetworks.com/cortex/agentix?ts=markdown) * [Identity Threat Detection and Response](https://www.paloaltonetworks.com/cortex/itdr?ts=markdown) [Endpoint Security](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Endpoint Protection](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) * [Ransomware Protection](https://www.paloaltonetworks.com/cortex/ransomware-protection?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/cortex/digital-forensics?ts=markdown) [Data Security](https://www.paloaltonetworks.com/cortex/data-security?ts=markdown) [![Cloud Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-cloud-logo-nav.svg)](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [Application Security Overview](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Application Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/application-security-posture-management?ts=markdown) * [Software Supply Chain Security](https://www.paloaltonetworks.com/cortex/cloud/software-supply-chain-security?ts=markdown) * [Infrasture-as-Code (IaC) Security](https://www.paloaltonetworks.com/cortex/cloud/infrastructure-as-code-security?ts=markdown) * [Software Composition Analysis](https://www.paloaltonetworks.com/cortex/cloud/software-composition-analysis?ts=markdown) * [Secrets Security](https://www.paloaltonetworks.com/cortex/cloud/secrets-security?ts=markdown) * [Open Partner Ecosystem](https://www.paloaltonetworks.com/cortex/cloud/appsec-partner-ecosystem?ts=markdown) [Cloud Posture Security Overview](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-security-posture-management?ts=markdown) * [Cloud Infrastructure Entitlement Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-infrastructure-entitlement-management?ts=markdown) * [Data Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/data-security-posture-management?ts=markdown) * [AI Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/ai-security-posture-management?ts=markdown) * [Vulnerability Management](https://www.paloaltonetworks.com/cortex/cloud/vulnerability-management?ts=markdown) * [Cloud Attack Surface Management](https://www.paloaltonetworks.com/cortex/cloud/attack-surface-management?ts=markdown) [Cloud Runtime Security Overview](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Cloud Detection and Response](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown) * [Container \& Kubernetes Security](https://www.paloaltonetworks.com/cortex/cloud/kubernetes-and-container-security?ts=markdown) * [Cloud Workload Protection](https://www.paloaltonetworks.com/cortex/cloud/cloud-workload-protection?ts=markdown) * [API Security](https://www.paloaltonetworks.com/cortex/cloud/api-security?ts=markdown) * [Serverless Security](https://www.paloaltonetworks.com/cortex/cloud/serverless-security?ts=markdown) [![Identity Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/idira-logo-nav.svg)](https://www.paloaltonetworks.com/idira?ts=markdown) [Human Identities](https://www.paloaltonetworks.com/idira/human?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) [Machine Identities](https://www.paloaltonetworks.com/idira/machine?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * Solutions Solutions By Use Case [![Drive AI Transformation icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/ai-page/teaser-block/teaser-icon-2.svg) Drive AI Transformation Scale enterprise AI adoption across employees, applications and agents with confidence and control](https://www.paloaltonetworks.com/ai-security?ts=markdown) [![Secure the Hybrid Network icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-strata.svg) Secure the Hybrid Network Stay ahead of AI-driven attacks with unified network security across hybrid environments](https://www.paloaltonetworks.com/network-security?ts=markdown) [![Accelerate Cloud Transformation icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Accelerate Cloud Transformation Build fast and innovate fearlessly with AI-driven protection from code to cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [![Secure AI Coding icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Secure AI Coding Let AI coding do more, with you in control. Protect data, govern agents and control AI costs.](https://www.paloaltonetworks.com/secure-ai-coding?ts=markdown) [![Secure Every Identity icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-idira.svg) Secure Every Identity Stop identity-led breaches: Secure human, machine, and agentic identities with zero trust](https://www.paloaltonetworks.com/idira?ts=markdown) [![Enable Autonomous SOC icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Enable Autonomous SOC Fight AI with AI to stop threats at machine speed with the power of analytics and automation](https://www.paloaltonetworks.com/cortex/fight-ai-with-ai?ts=markdown) [![Achieve Cyber Resilience icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-Unit42.svg) Achieve Cyber Resilience Partner with world-class experts to proactively reduce risk, recover rapidly, and outsmart emerging threats](https://www.paloaltonetworks.com/unit42/ai-advantage?ts=markdown) * Services Services Security Services [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/unit-logo-dark.svg)](https://www.paloaltonetworks.com/unit42?ts=markdown) Prepare for Emerging Risks * [AI Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ai-security-assessment?ts=markdown) * [Frontier AI](https://www.paloaltonetworks.com/unit42/ai-advantage?ts=markdown) * [Respond to Cyber Attacks](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond/incident-response?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/unit42/respond/digital-forensics?ts=markdown) * [Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed Threat Hunting](https://www.paloaltonetworks.com/cortex/managed-threat-hunting?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Attack Surface Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/attack-surface-assessment?ts=markdown) * [Breach Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/breach-readiness-review?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/cloud-security-assessment?ts=markdown) * [Compromise Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/compromise-assessment?ts=markdown) * [Ransomware Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ransomware-readiness-assessment?ts=markdown) * [Supply Chain](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/supply-chain-risk-assessment?ts=markdown) * [Tabletop Exercises](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/tabletop-exercises?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Cyber Risk](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/cyber-risk-assessment?ts=markdown) * [IR Plan Development](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/IR-plan-and-development-review?ts=markdown) * [Security Program Design](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/security-program-design?ts=markdown) * [SOC Assessment](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/soc-assessment?ts=markdown) * [Virtual CISO](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/virtual-ciso?ts=markdown) * [Zero Trust](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/zero-trust-advisory?ts=markdown) Understand the Adversary * [Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Offensive Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/offensive-security-services?ts=markdown) Managed Firewalls Managed Firewalls * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) Customer Services [Global Customer Services](https://www.paloaltonetworks.com/services?ts=markdown) * [Education \& Training](https://www.paloaltonetworks.com/services/education?ts=markdown) * [Professional Services](https://www.paloaltonetworks.com/services/consulting?ts=markdown) * [Success Tools](https://www.paloaltonetworks.com/services/customer-success-tools?ts=markdown) * [Support Services](https://www.paloaltonetworks.com/services/solution-assurance?ts=markdown) * [Customer Success](https://www.paloaltonetworks.com/services/customer-success?ts=markdown) [Under Attack?](https://www.paloaltonetworks.com/unit42/contact-unit42?ts=markdown) * [Services Overview](#services-panel-0) * [Security Services](#services-panel-1) * [Managed Firewalls](#services-panel-2) * [Customer Services](#services-panel-3) [Under Attack?](https://www.paloaltonetworks.com/unit42/contact-unit42?ts=markdown) [![Security Services logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/unit-logo-dark.svg)](https://www.paloaltonetworks.com/unit42?ts=markdown) Prepare for Emerging Risks * [AI Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ai-security-assessment?ts=markdown) * [Frontier AI](https://www.paloaltonetworks.com/unit42/ai-advantage?ts=markdown) * [Respond to Cyber Attacks](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond/incident-response?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/unit42/respond/digital-forensics?ts=markdown) * [Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed Threat Hunting](https://www.paloaltonetworks.com/cortex/managed-threat-hunting?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Attack Surface Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/attack-surface-assessment?ts=markdown) * [Breach Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/breach-readiness-review?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/cloud-security-assessment?ts=markdown) * [Compromise Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/compromise-assessment?ts=markdown) * [Ransomware Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ransomware-readiness-assessment?ts=markdown) * [Supply Chain](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/supply-chain-risk-assessment?ts=markdown) * [Tabletop Exercises](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/tabletop-exercises?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Cyber Risk](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/cyber-risk-assessment?ts=markdown) * [IR Plan Development](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/IR-plan-and-development-review?ts=markdown) * [Security Program Design](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/security-program-design?ts=markdown) * [SOC Assessment](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/soc-assessment?ts=markdown) * [Virtual CISO](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/virtual-ciso?ts=markdown) * [Zero Trust](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/zero-trust-advisory?ts=markdown) Understand the Adversary * [Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Offensive Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/offensive-security-services?ts=markdown) Managed Firewalls * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) [Global Customer Services](https://www.paloaltonetworks.com/services?ts=markdown) * [Education \& Training](https://www.paloaltonetworks.com/services/education?ts=markdown) * [Professional Services](https://www.paloaltonetworks.com/services/consulting?ts=markdown) * [Success Tools](https://www.paloaltonetworks.com/services/customer-success-tools?ts=markdown) * [Support Services](https://www.paloaltonetworks.com/services/solution-assurance?ts=markdown) * [Customer Success](https://www.paloaltonetworks.com/services/customer-success?ts=markdown) * Industries Industries [![Financial Services icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/financial-icon-2.svg) Financial Services Secure with AI cybersecurity, fraud and ransomware prevention, compliance, and customer data protection](https://www.paloaltonetworks.com/industry/financial-services?ts=markdown) [![Manufacturing icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/manufacturing-icon-2.svg) Manufacturing Secure with OT security, ransomware defense, industrial cybersecurity, supply chain resilience, and continuity](https://www.paloaltonetworks.com/industry/manufacturing?ts=markdown) [![Retail and Hospitality icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/retail-icon-2.svg) Retail and Hospitality Secure with payment security, PCI compliance, ransomware and fraud prevention, and data protection](https://www.paloaltonetworks.com/industry/retail?ts=markdown) [![Healthcare and Life Sciences icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/healthcare-icon-2.svg) Healthcare and Life Sciences Secure patient and clinical data, medical device security, ransomware defense, and HIPAA compliance](https://www.paloaltonetworks.com/industry/healthcare?ts=markdown) [![Public Sector icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/public-sector-icon-2.svg) Public Sector Secure with Zero Trust, cyber defense, compliance, infrastructure protection, and citizen data security](https://www.paloaltonetworks.com/industry/public-sector?ts=markdown) [![Utilities icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/utilities-icon-2.svg) Utilities Secure with power grid protection, OT network security, ransomware defense, and critical infrastructure security](https://www.paloaltonetworks.com/industry/electric-utilities?ts=markdown) [![Transportation icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/transportation-icon-2.svg) Transportation Secure OT and connected infrastructure protection, ransomware defense, supply chain security, compliance](https://www.paloaltonetworks.com/industry/transportation-security?ts=markdown) [![Small and Medium Business icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/smb-icon-2.svg) Small and Medium Business Secure against cyber threats using AI-powered endpoint, network, browser, cloud, and MDR](https://www.paloaltonetworks.com/industry/small-medium-business-portfolio?ts=markdown) * Partners Partners NextWave * [Partner Program](https://www.paloaltonetworks.com/partners/nextwave-partner-portal?ts=markdown) * [Become a Partner](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerregistration?type=becomepartner) * [Request Partner Portal Access](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerregistration?type=requestaccess) * [Partner Portal Login](https://www.paloaltonetworks.com/partners/nextwave-partner-portal?ts=markdown) * [Find a Partner](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerlocator) Partner Ecosystem [Explore All Partners Find the right partner network tailored to your business needs, cloud environments, and security requirements](https://www.paloaltonetworks.com/partners?ts=markdown) [Cloud Service Partners Bring cloud native security and compliance to the entire development lifecycle](https://www.paloaltonetworks.com/partners/nextwave-for-csp?ts=markdown) [Frontier AI Alliance Outpace today's cyberattacks through a global ecosystem of leaders orchestrating unified defenses](https://www.paloaltonetworks.com/frontier?ts=markdown) [Global System Integrators Speed and secure digital transformation with the industry's best technology, people and intelligence](https://www.paloaltonetworks.com/partners/nextwave-for-gsi?ts=markdown) [Managed Security Service Providers Gain valuable resource oversight to help your businesses administer security strategies](https://www.paloaltonetworks.com/partners/managed-security-service-providers?ts=markdown) [Resellers Deliver the most comprehensive cybersecurity portfolio while expanding opportunities and profitability](https://www.paloaltonetworks.com/partners/resellers?ts=markdown) [Service Providers Protect mobile users, devices and applications with effective, flexible and easy to deploy cybersecurity](https://www.paloaltonetworks.com/partners/service-providers?ts=markdown) [Technology Partners Advance security and transformation with innovative technology partner integrations](https://www.paloaltonetworks.com/partners/technology-partners?ts=markdown) * Resources Resources ![Learn icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/resource-library-icon.svg) Learn * [Resource Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Analyst Reports](https://www.paloaltonetworks.com/resources/research?ts=markdown) * [Customer Stories](https://www.paloaltonetworks.com/customers?ts=markdown) * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Threat Vector Podcast](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [Unit 42 Threat Research](https://unit42.paloaltonetworks.com/) * [Knowledgebase](https://knowledgebase.paloaltonetworks.com/) * [Technical Documentation](https://docs.paloaltonetworks.com/) ![Engage icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/engage-icon-2.svg) Engage * [Webinars](https://www.paloaltonetworks.com/resources/webinars?ts=markdown) * [Demos](https://www.paloaltonetworks.com/demos?ts=markdown) * [Test Drive](https://www.paloaltonetworks.com/resources/test-drives?ts=markdown) ![Connect icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/connect-icon-2.svg) Connect * [Executive Briefings](https://www.paloaltonetworks.com/about-us/executive-briefing-program?ts=markdown) * [Events](https://events.paloaltonetworks.com/) * [Live Community](https://live.paloaltonetworks.com/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) ![Discover icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/discover-icon-2.svg) Discover * [Why Palo Alto Networks?](https://www.paloaltonetworks.com/why-paloaltonetworks?ts=markdown) * [Platform Approach](https://www.paloaltonetworks.com/why-paloaltonetworks/platformization?ts=markdown) * [Awards \& Recognition](https://www.paloaltonetworks.com/about-us/awards?ts=markdown) * [Global Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Cloud Locations](https://www.paloaltonetworks.com/products/regional-cloud-locations?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Trust 360 Program](https://www.paloaltonetworks.com/resources/whitepapers/trust-360?ts=markdown) ![Company icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Management Team](https://www.paloaltonetworks.com/about-us/management?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en) * [Culture \& Benefits](https://jobs.paloaltonetworks.com/en/culture/) * [Ethics \& Compliance](https://www.paloaltonetworks.com/company/ethics-and-compliance?ts=markdown) * [Office Locations](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * ![search magnifying glass](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg) * us Language * USA (ENGLISH) * [AUSTRALIA (ENGLISH)](https://www.paloaltonetworks.com.au/cyberpedia/telemetry-pipeline) * [BRAZIL (PORTUGUÉS)](https://www.paloaltonetworks.com.br/cyberpedia/telemetry-pipeline) * [CANADA (ENGLISH)](https://www.paloaltonetworks.ca/cyberpedia/telemetry-pipeline) * [CHINA (简体中文)](https://www.paloaltonetworks.cn/cyberpedia/telemetry-pipeline) * [FRANCE (FRANÇAIS)](https://www.paloaltonetworks.fr/cyberpedia/telemetry-pipeline) * [GERMANY (DEUTSCH)](https://www.paloaltonetworks.de/cyberpedia/telemetry-pipeline) * [INDIA (ENGLISH)](https://www.paloaltonetworks.in/cyberpedia/telemetry-pipeline) * [ITALY (ITALIANO)](https://www.paloaltonetworks.it/cyberpedia/telemetry-pipeline) * [JAPAN (日本語)](https://www.paloaltonetworks.jp/cyberpedia/telemetry-pipeline) * [KOREA (한국어)](https://www.paloaltonetworks.co.kr/cyberpedia/telemetry-pipeline) * [LATIN AMERICA (ESPAÑOL)](https://www.paloaltonetworks.lat/cyberpedia/telemetry-pipeline) * [MEXICO (ESPAÑOL)](https://www.paloaltonetworks.com.mx/cyberpedia/telemetry-pipeline) * [SINGAPORE (ENGLISH)](https://www.paloaltonetworks.sg/cyberpedia/telemetry-pipeline) * [SPAIN (ESPAÑOL)](https://www.paloaltonetworks.es/cyberpedia/telemetry-pipeline) * [TAIWAN (繁體中文)](https://www.paloaltonetworks.tw/cyberpedia/telemetry-pipeline) * [UK (ENGLISH)](https://www.paloaltonetworks.co.uk/cyberpedia/telemetry-pipeline) * Accounts \& Support Accounts \& Support * Accounts * Customer * Partner * Employee * [Login to Download](https://www.paloaltonetworks.com/login?ts=markdown) * [Become a Member](https://www.paloaltonetworks.com/login?screenToRender=traditionalRegistration&ts=markdown) * Support * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [What's New](https://www.paloaltonetworks.com/resources?ts=markdown) * [Get Support](https://support.paloaltonetworks.com/SupportAccount/MyAccount) [Under Attack?](https://www.paloaltonetworks.com/unit42/contact-unit42?ts=markdown) * [Demos and Trials](https://www.paloaltonetworks.com/get-started?ts=markdown) [Discover how prevention starts before the attack at InterSECt 2026. Watch Now](https://www.paloaltonetworks.com/intersect?ts=markdown) [Prisma AIRS AI Gateway is now generally available](https://www.paloaltonetworks.com/ai-security/ai-gateway?ts=markdown) [](https://www.paloaltonetworks.com/?ts=markdown) Search All * [Tech Docs](https://docs.paloaltonetworks.com/search) Close search modal 1. [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) 2. [Observability](https://www.paloaltonetworks.com/cyberpedia/observability?ts=markdown) 3. [Observability Fundamentals](https://www.paloaltonetworks.com/cyberpedia/what-is-observability?ts=markdown) 4. [Telemetry Pipeline](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline?ts=markdown) Table of Contents * [What Is Observability? Core Signals, Benefits, and Use Cases](https://www.paloaltonetworks.com/cyberpedia/what-is-observability?ts=markdown) * [Why Observability Matters](https://www.paloaltonetworks.com/cyberpedia/what-is-observability#matters?ts=markdown) * [How Observability Works](https://www.paloaltonetworks.com/cyberpedia/what-is-observability#works?ts=markdown) * [The Core Signals of Observability](https://www.paloaltonetworks.com/cyberpedia/what-is-observability#core?ts=markdown) * [Benefits of Observability](https://www.paloaltonetworks.com/cyberpedia/what-is-observability#benefits?ts=markdown) * [Common Observability Use Cases](https://www.paloaltonetworks.com/cyberpedia/what-is-observability#usecase?ts=markdown) * [Observability vs. Security](https://www.paloaltonetworks.com/cyberpedia/what-is-observability#security?ts=markdown) * [Common Observability Challenges](https://www.paloaltonetworks.com/cyberpedia/what-is-observability#challenges?ts=markdown) * [What Makes a System Observable?](https://www.paloaltonetworks.com/cyberpedia/what-is-observability#observable?ts=markdown) * [Observability in Cloud Native Environments](https://www.paloaltonetworks.com/cyberpedia/what-is-observability#environments?ts=markdown) * [Observability FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-observability#page-anchor?ts=markdown) * What Is a Telemetry Pipeline? * [Why are Telemetry Pipelines Important?](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#why?ts=markdown) * [How a Telemetry Pipeline Works](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#how?ts=markdown) * [What Data Moves Through a Telemetry Pipeline?](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#what?ts=markdown) * [Core Telemetry Pipeline Functions](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#core?ts=markdown) * [Telemetry Pipeline Architecture](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#pipeline?ts=markdown) * [Telemetry Pipelines and OpenTelemetry](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#telemetry?ts=markdown) * [Telemetry Pipeline vs. Observability Pipeline](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#vs?ts=markdown) * [Telemetry Pipeline Benefits](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#benefits?ts=markdown) * [Telemetry Pipeline Risks](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#risks?ts=markdown) * [Telemetry Pipeline Best Practices](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#best?ts=markdown) * [Telemetry Pipeline FAQs](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#faqs?ts=markdown) * [What Is AI Observability? Benefits and How It Works](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-observability?ts=markdown) * [Why AI Systems Require New Observability](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-observability#why?ts=markdown) * [AI Observability vs. AI Monitoring](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-observability#ai?ts=markdown) * [Core AI Observability Signals](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-observability#core?ts=markdown) * [Tracing AI Applications and Agents](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-observability#tracing?ts=markdown) * [AI Observability, AI Security and AI Governance](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-observability#governance?ts=markdown) * [AI for Observability vs. Observability for AI](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-observability#vs?ts=markdown) * [AI Observability Best Practices](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-observability#best?ts=markdown) * [Common AI Observability Challenges](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-observability#common?ts=markdown) * [AI Observability FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-observability#faqs?ts=markdown) * [Logs vs. Metrics vs. Traces: Key Differences](https://www.paloaltonetworks.com/cyberpedia/logs-vs-metrics-vs-traces?ts=markdown) * [Logs vs. Metrics vs. Traces at a Glance](https://www.paloaltonetworks.com/cyberpedia/logs-vs-metrics-vs-traces#logs?ts=markdown) * [What Are Logs?](https://www.paloaltonetworks.com/cyberpedia/logs-vs-metrics-vs-traces#what?ts=markdown) * [What Are Metrics?](https://www.paloaltonetworks.com/cyberpedia/logs-vs-metrics-vs-traces#metrics?ts=markdown) * [What Are Traces?](https://www.paloaltonetworks.com/cyberpedia/logs-vs-metrics-vs-traces#traces?ts=markdown) * [How Do Logs, Metrics and Traces Work Together?](https://www.paloaltonetworks.com/cyberpedia/logs-vs-metrics-vs-traces#how?ts=markdown) * [Logs vs. Metrics vs. Traces: Which Should You Use?](https://www.paloaltonetworks.com/cyberpedia/logs-vs-metrics-vs-traces#use?ts=markdown) * [What Role Does OpenTelemetry Play?](https://www.paloaltonetworks.com/cyberpedia/logs-vs-metrics-vs-traces#role?ts=markdown) * [Benefits of Correlating Logs, Metrics and Traces](https://www.paloaltonetworks.com/cyberpedia/logs-vs-metrics-vs-traces#benefits?ts=markdown) * [Best Practices for Managing Logs, Metrics and Traces](https://www.paloaltonetworks.com/cyberpedia/logs-vs-metrics-vs-traces#best?ts=markdown) * [Logs vs. Metrics vs. Traces: Key Differences FAQs](https://www.paloaltonetworks.com/cyberpedia/logs-vs-metrics-vs-traces#faqs?ts=markdown) * [What Is Cloud Native Observability?](https://www.paloaltonetworks.com/cyberpedia/what-is-cloud-native-observability?ts=markdown) * [Why Cloud Native Environments Require Observability](https://www.paloaltonetworks.com/cyberpedia/what-is-cloud-native-observability#why?ts=markdown) * [How Cloud Native Observability Works](https://www.paloaltonetworks.com/cyberpedia/what-is-cloud-native-observability#native?ts=markdown) * [Cloud Native Observability and Kubernetes](https://www.paloaltonetworks.com/cyberpedia/what-is-cloud-native-observability#kubernetes?ts=markdown) * [Benefits of Cloud Native Observability](https://www.paloaltonetworks.com/cyberpedia/what-is-cloud-native-observability#benefits?ts=markdown) * [Cloud Native Observability Best Practices](https://www.paloaltonetworks.com/cyberpedia/what-is-cloud-native-observability#best?ts=markdown) * [How Palo Alto Networks Approaches Cloud Native Observability](https://www.paloaltonetworks.com/cyberpedia/what-is-cloud-native-observability#approaches?ts=markdown) * [Cloud Native Observability FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-cloud-native-observability#faqs?ts=markdown) * [What Is Distributed Tracing?](https://www.paloaltonetworks.com/cyberpedia/what-is-distributed-tracing?ts=markdown) * [Why Distributed Tracing Matters](https://www.paloaltonetworks.com/cyberpedia/what-is-distributed-tracing#why?ts=markdown) * [How Distributed Tracing Works](https://www.paloaltonetworks.com/cyberpedia/what-is-distributed-tracing#how?ts=markdown) * [Core Components of a Trace](https://www.paloaltonetworks.com/cyberpedia/what-is-distributed-tracing#core?ts=markdown) * [Distributed Tracing with OpenTelemetry](https://www.paloaltonetworks.com/cyberpedia/what-is-distributed-tracing#distributed?ts=markdown) * [Sampling Strategies](https://www.paloaltonetworks.com/cyberpedia/what-is-distributed-tracing#sampling?ts=markdown) * [Distributed Tracing Use Cases](https://www.paloaltonetworks.com/cyberpedia/what-is-distributed-tracing#tracing?ts=markdown) * [Distributed Tracing Best Practices](https://www.paloaltonetworks.com/cyberpedia/what-is-distributed-tracing#best?ts=markdown) * [Distributed Tracing FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-distributed-tracing#faqs?ts=markdown) * [What Are SRE Fundamentals: SLA vs SLO vs SLI?](https://www.paloaltonetworks.com/cyberpedia/sre-fundamentals-sla-vs-slo-vs-sli?ts=markdown) * [SRE Fundamentals Explained](https://www.paloaltonetworks.com/cyberpedia/sre-fundamentals-sla-vs-slo-vs-sli#sre-fundamentals?ts=markdown) * [SLA vs. SLO vs. SLI: A Comparative Framework](https://www.paloaltonetworks.com/cyberpedia/sre-fundamentals-sla-vs-slo-vs-sli#sla-vs-slo?ts=markdown) * [Breaking Down the Components: SLI, SLO, and SLA](https://www.paloaltonetworks.com/cyberpedia/sre-fundamentals-sla-vs-slo-vs-sli#components?ts=markdown) * [The Strategic Role of Error Budgets in SRE](https://www.paloaltonetworks.com/cyberpedia/sre-fundamentals-sla-vs-slo-vs-sli#strategic-role?ts=markdown) * [Best Practices for Implementing SRE Metrics](https://www.paloaltonetworks.com/cyberpedia/sre-fundamentals-sla-vs-slo-vs-sli#best-practices?ts=markdown) * [SRE Fundamentals FAQs](https://www.paloaltonetworks.com/cyberpedia/sre-fundamentals-sla-vs-slo-vs-sli#faqs?ts=markdown) * [Observability vs. Monitoring: Key Differences](https://www.paloaltonetworks.com/cyberpedia/observability-vs-monitoring-key-differences?ts=markdown) * [Observability vs. Monitoring Explained](https://www.paloaltonetworks.com/cyberpedia/observability-vs-monitoring-key-differences#explained?ts=markdown) * [Observability vs. Monitoring: Key Differences](https://www.paloaltonetworks.com/cyberpedia/observability-vs-monitoring-key-differences#differences?ts=markdown) * [Why Monitoring Alone Is No Longer Enough](https://www.paloaltonetworks.com/cyberpedia/observability-vs-monitoring-key-differences#why?ts=markdown) * [The Role of Telemetry in Observability](https://www.paloaltonetworks.com/cyberpedia/observability-vs-monitoring-key-differences#role?ts=markdown) * [Observability in Cloud Native and Kubernetes Environments](https://www.paloaltonetworks.com/cyberpedia/observability-vs-monitoring-key-differences#environments?ts=markdown) * [Observability and Security](https://www.paloaltonetworks.com/cyberpedia/observability-vs-monitoring-key-differences#security?ts=markdown) * [Observability for AI Systems](https://www.paloaltonetworks.com/cyberpedia/observability-vs-monitoring-key-differences#systems?ts=markdown) * [When to Use Monitoring](https://www.paloaltonetworks.com/cyberpedia/observability-vs-monitoring-key-differences#when?ts=markdown) * [When to Use Observability](https://www.paloaltonetworks.com/cyberpedia/observability-vs-monitoring-key-differences#use?ts=markdown) * [How Observability and Monitoring Work Together](https://www.paloaltonetworks.com/cyberpedia/observability-vs-monitoring-key-differences#how?ts=markdown) * [Benefits of Observability](https://www.paloaltonetworks.com/cyberpedia/observability-vs-monitoring-key-differences#benefits?ts=markdown) * [Challenges of Observability](https://www.paloaltonetworks.com/cyberpedia/observability-vs-monitoring-key-differences#challenges?ts=markdown) * [How to Build an Observability Strategy](https://www.paloaltonetworks.com/cyberpedia/observability-vs-monitoring-key-differences#strategy?ts=markdown) * [Observability vs. Monitoring FAQ](https://www.paloaltonetworks.com/cyberpedia/observability-vs-monitoring-key-differences#faqs?ts=markdown) * [What Is OpenTelemetry (OTel)?](https://www.paloaltonetworks.com/cyberpedia/what-is-open-telemetry?ts=markdown) * [OpenTelemetry Explained](https://www.paloaltonetworks.com/cyberpedia/what-is-open-telemetry#openTelemetry-explained?ts=markdown) * [The Three Pillars of OTel Signals](https://www.paloaltonetworks.com/cyberpedia/what-is-open-telemetry#the-three-pillars-of-OTel-signals?ts=markdown) * [Strategic Benefits and Advantages](https://www.paloaltonetworks.com/cyberpedia/what-is-open-telemetry#strategic-benefits-and-advantages?ts=markdown) * [Implementation Best Practices](https://www.paloaltonetworks.com/cyberpedia/what-is-open-telemetry#implementation-best-practices?ts=markdown) * [OpenTelemetry FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-open-telemetry#OpenTelemetry-faq?ts=markdown) * [What Is High Cardinality in Observability?](https://www.paloaltonetworks.com/cyberpedia/what-is-high-cardinality?ts=markdown) * [High Cardinality Explained](https://www.paloaltonetworks.com/cyberpedia/what-is-high-cardinality#explained?ts=markdown) * [Why High Cardinality Matters in Observability](https://www.paloaltonetworks.com/cyberpedia/what-is-high-cardinality#observability?ts=markdown) * [Cardinality vs. Dimensionality](https://www.paloaltonetworks.com/cyberpedia/what-is-high-cardinality#cardinality?ts=markdown) * [How High Cardinality Happens](https://www.paloaltonetworks.com/cyberpedia/what-is-high-cardinality#happens?ts=markdown) * [The Impact of High Cardinality on Observability Systems](https://www.paloaltonetworks.com/cyberpedia/what-is-high-cardinality#impact?ts=markdown) * [Example: How Cardinality Multiplies](https://www.paloaltonetworks.com/cyberpedia/what-is-high-cardinality#multiplies?ts=markdown) * [How to Reduce High Cardinality](https://www.paloaltonetworks.com/cyberpedia/what-is-high-cardinality#reduce?ts=markdown) * [Metrics vs. Logs vs. Traces for High-Cardinality Data](https://www.paloaltonetworks.com/cyberpedia/what-is-high-cardinality#metrics?ts=markdown) * [Best Practices for Managing High Cardinality](https://www.paloaltonetworks.com/cyberpedia/what-is-high-cardinality#practices?ts=markdown) * [Why High Cardinality Is a Governance Problem](https://www.paloaltonetworks.com/cyberpedia/what-is-high-cardinality#governance?ts=markdown) * [FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-high-cardinality#faq?ts=markdown) # What Is a Telemetry Pipeline? 6 min. read Table of Contents * * [Why are Telemetry Pipelines Important?](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#why?ts=markdown) * [How a Telemetry Pipeline Works](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#how?ts=markdown) * [What Data Moves Through a Telemetry Pipeline?](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#what?ts=markdown) * [Core Telemetry Pipeline Functions](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#core?ts=markdown) * [Telemetry Pipeline Architecture](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#pipeline?ts=markdown) * [Telemetry Pipelines and OpenTelemetry](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#telemetry?ts=markdown) * [Telemetry Pipeline vs. Observability Pipeline](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#vs?ts=markdown) * [Telemetry Pipeline Benefits](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#benefits?ts=markdown) * [Telemetry Pipeline Risks](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#risks?ts=markdown) * [Telemetry Pipeline Best Practices](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#best?ts=markdown) * [Telemetry Pipeline FAQs](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#faqs?ts=markdown) 1. Why are Telemetry Pipelines Important? * * [Why are Telemetry Pipelines Important?](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#why?ts=markdown) * [How a Telemetry Pipeline Works](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#how?ts=markdown) * [What Data Moves Through a Telemetry Pipeline?](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#what?ts=markdown) * [Core Telemetry Pipeline Functions](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#core?ts=markdown) * [Telemetry Pipeline Architecture](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#pipeline?ts=markdown) * [Telemetry Pipelines and OpenTelemetry](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#telemetry?ts=markdown) * [Telemetry Pipeline vs. Observability Pipeline](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#vs?ts=markdown) * [Telemetry Pipeline Benefits](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#benefits?ts=markdown) * [Telemetry Pipeline Risks](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#risks?ts=markdown) * [Telemetry Pipeline Best Practices](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#best?ts=markdown) * [Telemetry Pipeline FAQs](https://www.paloaltonetworks.com/cyberpedia/telemetry-pipeline#faqs?ts=markdown) A telemetry pipeline is an architectural layer that collects, processes and routes machine-generated data---including logs, metrics, traces and events---from multiple sources to one or more destinations. Telemetry pipelines give organizations control over data before it reaches an observability, analytics, archive or security platform. Teams can use the pipeline to filter noise, redact sensitive information, standardize formats, enrich records with operational context and route each signal to the appropriate destination. Unlike direct source-to-backend integrations, a telemetry pipeline separates data collection and processing from storage and analysis. This separation can improve data quality, reduce ingestion costs, support multiple tools and make it easier to change downstream platforms. Key Points * **Separated architecture**: Telemetry pipelines separate data collection and processing from storage and analysis. \* **Core processing**: Common functions include parsing, filtering, enrichment, redaction, sampling, aggregation and routing. \* **Cost reduction**: Pipelines can reduce unnecessary ingestion and prevent sensitive data from reaching downstream tools. \* **Open flexibility**: Open standards make it easier to send telemetry to multiple destinations and change backends. \* **Pipeline resilience**: Pipeline reliability must be monitored because dropped or delayed data creates operational blind spots. ## Why are Telemetry Pipelines Important? Modern environments generate telemetry across applications, containers, Kubernetes clusters, cloud platforms, endpoints, networks, SaaS services and security controls. Sending every signal directly to every backend can create duplicated collection, inconsistent data processing, unpredictable costs and tightly coupled vendor integrations. A telemetry pipeline establishes a control layer between telemetry sources and downstream destinations. This control layer allows teams to determine: * Which telemetry should be collected * Which data should be filtered or retained * How records should be structured and enriched * Where sensitive information must be removed * Which destinations should receive each signal * Whether telemetry should be indexed, archived or discarded This capability is foundational to operating [cloud native observability](https://www.paloaltonetworks.com/cyberpedia/what-is-cloud-native-observability?ts=markdown) at scale. ![Diagram showing a telemetry pipeline collecting logs, metrics, traces and events from applications, Kubernetes, cloud systems, endpoints, networks and SaaS services, then parsing, enriching, filtering, sampling, redacting and routing the data to observability, security analytics, archive and compliance destinations.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/telemetry-pipeline/telemetry-pipeline-collects.webp "Diagram showing a telemetry pipeline collecting logs, metrics, traces and events from applications, Kubernetes, cloud systems, endpoints, networks and SaaS services, then parsing, enriching, filtering, sampling, redacting and routing the data to observability, security analytics, archive and compliance destinations.") ***Figure 1**: A telemetry pipeline collects logs, metrics, traces and events; processes them through parsing, enrichment, filtering, sampling and redaction; and routes the resulting data to observability, security, compliance and archive destinations.* ## How a Telemetry Pipeline Works A telemetry pipeline generally operates in four stages: 1. **Collect**: Agents, APIs, collectors and native protocols receive telemetry from applications, infrastructure and security systems. 2. **Process**: The pipeline parses, normalizes, enriches, filters, samples, aggregates or redacts the data. 3. **Route**: Routing rules determine which destination or destinations receive each type of telemetry. 4. **Deliver**: The processed data is exported to observability, security, compliance, archive or analytics platforms. Processing can occur at the source, at the edge, within regional aggregators or through a centralized pipeline service. Edge processing can reduce the volume of data transferred over the network. Centralized processing can simplify governance and rule management. Many enterprises use a layered telemetry pipeline that combines both approaches. ## What Data Moves Through a Telemetry Pipeline? Telemetry pipelines can process several forms of machine-generated data. | Telemetry type | What it records | Common pipeline actions | | **Logs** | Discrete application, system and security events | Parse, redact, filter, enrich and route | | **Metrics** | Numerical measurements collected over time | Aggregate, downsample and route | | **Traces** | The path of a request across distributed services | Sample, enrich and route | | **Events** | State changes or notable operational occurrences | Normalize, prioritize and distribute | | **Profiles** | Resource usage at the code or process level | Filter, aggregate and route | | **Audit records** | User, administrative and system activity | Redact, retain and route according to policy | | **Security telemetry** | Findings, alerts, network activity and threat signals | Enrich, prioritize and route to security platforms | |------------------------|-------------------------------------------------------|----------------------------------------------------| Logs, metrics and traces serve different but complementary purposes. See [Logs vs. Metrics vs. Traces](https://www.paloaltonetworks.com/cyberpedia/logs-vs-metrics-vs-traces?ts=markdown) for a detailed comparison. ## Core Telemetry Pipeline Functions ### Collection Collection brings telemetry into the pipeline through agents, collectors, APIs, message queues or native protocols. A pipeline may receive data directly from sources or from an existing collection layer. ### Parsing Parsing converts unstructured or semi-structured messages into fields that downstream systems can query and analyze. ### Normalization Normalization maps data from different sources to consistent field names, formats, schemas and units. ### Enrichment Enrichment adds useful context, such as: * Service name and owner * Application environment * Cloud account or subscription * Geographic region * Asset criticality * Deployment version * Kubernetes metadata This context can make telemetry easier to search, correlate and prioritize. ### Filtering Filtering removes telemetry that does not provide sufficient operational, security or compliance value. Filters can eliminate repetitive messages, expected health events and other low-value data. ### Sampling Sampling retains a selected portion of telemetry instead of sending every record downstream. Sampling policies may be random, rate-based, priority-based or dependent on attributes such as errors and latency. ### Aggregation Aggregation converts detailed telemetry into summaries, counts, distributions or time-based measurements. It can reduce data volume while preserving important trends. ### Redaction Redaction removes or masks credentials, personal information, payment data and other sensitive fields before telemetry leaves a controlled environment. ### Routing Routing directs telemetry to different destinations according to signal type, content, geography, team, sensitivity, cost or use case. One record may be sent to multiple destinations when appropriate. ### Buffering and Retry Buffering temporarily holds data when a destination is unavailable or unable to accept additional traffic. Retry and backpressure mechanisms help prevent data loss during outages or traffic spikes. ## Telemetry Pipeline Architecture A telemetry pipeline can be deployed through one or more architectural layers. | Architecture | How it works | Primary advantage | Potential limitation | | **Agent-based** | Software agents collect and process telemetry on individual systems | Processing occurs close to the source | Agents can consume local resources and require lifecycle management | | **Edge pipeline** | Telemetry is processed near the source or within a local environment | Reduces network transfer and central ingestion volume | Rules may be distributed across many locations | | **Regional pipeline** | Regional services aggregate telemetry from multiple environments | Supports geographic control and reduces long-distance transfer | Adds another operational layer | | **Centralized pipeline** | A shared service processes telemetry across the organization | Simplifies policy management and governance | Can become a bottleneck or single point of failure | | **Layered pipeline** | Edge, regional and centralized processing are combined | Balances efficiency, resilience and governance | Requires careful coordination between layers | |--------------------------|----------------------------------------------------------------------|----------------------------------------------------------------|---------------------------------------------------------------------| The appropriate design depends on data volume, latency requirements, geographic restrictions, security policies and the reliability required for critical telemetry. ## Telemetry Pipelines and OpenTelemetry [OpenTelemetry](https://www.paloaltonetworks.com/cyberpedia/what-is-open-telemetry?ts=markdown) is an open source observability framework for generating, collecting and exporting telemetry. The OpenTelemetry Collector can receive, process and export traces, metrics and logs through vendor-neutral components. A collector configuration commonly includes: * Receivers that accept telemetry * Processors that transform or filter data * Exporters that send data to downstream destinations * Connectors that link pipeline components * Extensions that provide supporting capabilities An OpenTelemetry pipeline is therefore one implementation of a telemetry processing flow. However, a broader enterprise telemetry pipeline may support additional agents, protocols, message formats, security events and destinations. OpenTelemetry can be an important component of a telemetry pipeline without necessarily being the organization's only collection or processing technology. ## Telemetry Pipeline vs. Observability Pipeline The terms telemetry pipeline and observability pipeline are frequently used interchangeably, but their emphasis can differ. | Term | Primary emphasis | Typical data and use cases | | **Telemetry pipeline** | Collecting, processing and routing machine-generated data | Logs, metrics, traces, events, profiles and security telemetry | | **Observability pipeline** | Preparing telemetry for operational visibility and troubleshooting | Application performance, service health, infrastructure and reliability | | **Security data pipeline** | Preparing and routing telemetry for threat detection and investigation | Security events, network telemetry, alerts, audit records and findings | | **Data pipeline** | Moving and transforming data for broad business or analytical use | Transactions, customer records, telemetry and other enterprise data | |----------------------------|------------------------------------------------------------------------|-------------------------------------------------------------------------| A telemetry pipeline is the broader architectural concept. An observability pipeline or security data pipeline can be considered a telemetry pipeline optimized for a particular set of use cases. Organizations should evaluate the actual collection, processing, governance, reliability and routing capabilities instead of relying only on category labels. ## Telemetry Pipeline Benefits ### Lower Telemetry Costs Filtering, aggregation, sampling and selective routing can reduce the amount of telemetry sent to expensive real-time indexing and analytics platforms. ### Improved Data Quality Parsing, normalization and enrichment create more consistent data for queries, dashboards, alerts, investigations and automated analysis. ### Stronger Data Governance Redaction and policy-based routing can prevent sensitive or regulated information from reaching unauthorized systems or geographic regions. ### Greater Tool Flexibility A decoupled telemetry pipeline makes it easier to add, replace or migrate downstream platforms without rewriting every source integration. ### Multi-Destination Delivery The same telemetry can support observability, security, compliance and archive requirements without requiring separate collection mechanisms. ### More Consistent Policies Centralized or coordinated processing rules allow organizations to apply common data standards across teams and environments. ## Telemetry Pipeline Risks A telemetry pipeline also introduces operational risks that must be managed. | Risk | Potential impact | Recommended control | | **Pipeline failure** | Delayed or lost telemetry creates visibility gaps | Use buffering, retries, redundancy and recovery testing | | **Processing bottlenecks** | Backlogs increase telemetry delivery latency | Monitor throughput, queue depth and processing time | | **Over-filtering** | Valuable troubleshooting or security evidence may be discarded | Test filters and maintain archive paths for selected data | | **Incorrect parsing** | Fields may be missing, mislabeled or unusable | Validate rules against representative telemetry | | **Sensitive-data exposure** | Confidential information may reach unauthorized destinations | Apply redaction and destination policies before export | | **Uncontrolled enrichment** | Added fields can expose sensitive data or increase cardinality | Govern enrichment sources and field creation | | **Configuration drift** | Environments may process the same telemetry differently | Store rules in version control and automate validation | | **Excessive cardinality** | Storage and query costs may increase significantly | Monitor and control high-cardinality fields | |-----------------------------|----------------------------------------------------------------|-----------------------------------------------------------| Read, [What Is High Cardinality?](https://www.paloaltonetworks.com/cyberpedia/what-is-high-cardinality?ts=markdown), for more information about controlling highly variable telemetry dimensions. ## Telemetry Pipeline Best Practices ### Classify Telemetry Before Processing It Classify data according to operational value, sensitivity, retention requirements and downstream use. Not every signal requires real-time indexing. ### Process Data Close to the Source Perform filtering, redaction and aggregation near the source when doing so reduces unnecessary data transfer without creating unmanageable distributed rules. ### Use Version-Controlled Pipeline Rules Store telemetry processing configurations in version control. Require peer review, automated validation and documented approval for high-impact changes. ### Test Changes Against Representative Traffic Test new parsing, filtering, sampling and routing rules against realistic telemetry before production deployment. ### Provide Rollback Capabilities Pipeline changes can affect multiple platforms simultaneously. Maintain known-good configurations and a reliable rollback process. ### Monitor the Telemetry Pipeline A telemetry pipeline must itself be observable. Track: * Data throughput * Queue depth * Processing latency * Resource utilization * Parsing errors * Dropped records * Retry volume * Export failures * Destination availability ### Maintain Telemetry Lineage Document where telemetry originated, which transformations were applied and which destinations received it. Lineage supports troubleshooting, audits and governance. ### Use Durable Paths for Critical Data Security records, audit events and other critical telemetry may require persistent queues, redundant routes or archive copies. ### Control Sampling Carefully Sampling should preserve high-value telemetry, including errors, unusual latency, security events and critical transactions. ### Separate Real-Time Analysis From Long-Term Retention Send high-value operational telemetry to real-time analytics while routing less urgent evidence to lower-cost archive storage. ## Telemetry Pipeline FAQs ### What data moves through a telemetry pipeline? Common data includes logs, metrics, traces and events. Some pipelines also process profiles, audit records, network telemetry and security findings. ### Is a telemetry pipeline a storage platform? Usually no. It processes and routes data before storage, although it may buffer data temporarily for reliability. ### Can a telemetry pipeline reduce observability costs? Yes. Filtering, sampling, aggregation and routing can prevent low-value data from entering expensive real-time analytics tiers. ### Can one pipeline send data to multiple tools? Yes. Multi-destination routing is a central use case and can support observability, security, compliance and archive requirements. ### What happens if the pipeline fails? Telemetry may be delayed or lost. Pipelines should use buffering, backpressure management, retries, health monitoring and tested recovery procedures. ![Share page on facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/facebook-circular-icon.svg) ![Share page on linkedin](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/linkedin-circular-icon.svg) [![Share page by an email](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/email-circular-icon.svg)](mailto:?subject=What%20Is%20a%20Telemetry%20Pipeline%3F&body=Learn%20how%20telemetry%20pipelines%20collect%2C%20process%2C%20enrich%20and%20route%20logs%2C%20metrics%20and%20traces%20to%20improve%20observability%2C%20security%2C%20governance%20and%20cost%20control.%20at%20https%3A//www.paloaltonetworks.com/cyberpedia/telemetry-pipeline) Back to Top [Previous](https://www.paloaltonetworks.com/cyberpedia/observability?ts=markdown) Observability [Next](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-observability?ts=markdown) What Is AI Observability? Benefits and How It Works {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Prepare for Emerging Risks](https://www.paloaltonetworks.com/unit42/frontier-ai-defense?ts=markdown) * [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Understand the Adversary](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Respond to a Cyber Attack](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![Palo Alto Networks Logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language