Cortex XSIAM has not received any logs for 30 minutes from a Palo Alto Networks...

Cortex XSIAM has not received any logs for 30 minutes from a Palo Alto Networks NGFW named "MainFW.” An engineer wants to create an alert for this scenario.

Correlation rule settings include:

Time Schedule: Every 30 minutes

Query Timeframe: 30 minutes

Action: Generate alert

Alert Name: No logs received from MainFW in the past 30 minutes

Which query should be used in the correlation rule?

A)

B)

C)

D)