topic RQL query to list the VMs having a public IP address in Prisma Cloud Discussions

RQL query to list the VMs having a public IP address

C.sasanapuri — Mon, 02 Sep 2024 09:50:10 GMT

hi can you any one help me out ( RQL query to list the VMs having a public IP address )

Re: RQL query to list the VMs having a public IP address

EBarragan2 — Tue, 03 Sep 2024 15:43:29 GMT

something like this? config from network where source.network = '0.0.0.0/0' and address.match.criteria = 'full_match' and dest.resource.type = 'Instance' and dest.cloud.type = 'AZURE' and dest.resource.state = 'Active'

Re: RQL query to list the VMs having a public IP address

EBarragan2 — Tue, 03 Sep 2024 15:46:15 GMT

config from cloud.resource where cloud.type = 'azure' AND api.name = 'azure-vm-list' AND json.rule = powerState contains "PowerState/running" AND ['properties.networkProfile'].['networkInterfaces'][*].['publicIpAddressId'] exists