Find Azure application gateway listeners associated with public IP

Juanpnav — Thu, 03 Aug 2023 20:24:20 GMT

I think the only method is with this RQL:

config from cloud.resource where cloud.type = 'azure' AND api.name = 'azure-application-gateway' AND json.rule = "['properties.frontendIPConfigurations'][?(@.['properties.publicIPAddress'].id != '')].['properties.httpListeners'].id exists"

However, inside the array you can't put any key value with dots between its characters, so I got error by trying that query. What Can I do?

Re: Find Azure application gateway listeners associated with public IP

smakineni — Tue, 29 Aug 2023 18:05:37 GMT

Hello, this can done using RQL joins.

Please try the RQL query below.

config from cloud.resource where api.name = 'azure-application-gateway' as X; config from cloud.resource where api.name = 'azure-network-public-ip-address' as Y; filter "$.['X'].['properties.frontendIPConfigurations'][*].['properties.publicIPAddress'].['id'] contains $.Y.id"; show Y;

Ref: https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/operators

Please let me know if you have any questions or would like to schedule a call to discuss this further.

Regards

topic Find Azure application gateway listeners associated with public IP in Prisma Cloud Discussions

Find Azure application gateway listeners associated with public IP

Re: Find Azure application gateway listeners associated with public IP