topic Re: Reporting in Prisma Cloud Discussions

Reporting

SSiggins — Tue, 13 Jul 2021 16:30:08 GMT

For Prisma cloud what are folks using for reporting? The canned reports are lacking and we need to customize reports to make them actionable by groups. Customization in the tool is restricted to occurrence and one other item.

Re: Reporting

AKing9 — Thu, 11 Aug 2022 18:00:50 GMT

Greetings SSiggins,

I hope that this note finds you well! I know that it has been a while since you had posted this question but I wanted to see if you still potentially needed any help. Thank you for your time and I hope that you have a good remainder of your day.

Kind Regards,

J. Avery King

Re: Reporting

MDavis29 — Thu, 11 Aug 2022 20:22:50 GMT

SSiggins,

Reporting details in Prisma Cloud can be found in the link below, but if you are looking to move the data around use the Business report as it will be in a CSV vs the Cloud Security assessment PDF format. If this is not what your looking for and you need something custom please let me know or review our feature request form below as well.

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/manage-prisma-cloud-alerts/generate-reports-on-prisma-cloud-alerts

feature request:

https://live.paloaltonetworks.com/t5/general-topics/feature-request-list/td-p/209128

Re: Reporting

TPearson3 — Wed, 31 Aug 2022 15:35:49 GMT

We currently use python and the API to run 2 types of 'reports'
1. We email reports to teams on the status of their running containers or hosts. these teams are defined in collections and based on docker labels.
2. post to teams some summary information, like how many containers are in Prisma or total vuln data

What I still need to figure out is how to make a decent dashboard. As we have been working on this, we also have found that the data is very inconsistent across prisma. For example, if I look at all the containers in Radar I get one number, if I look at containers in monitor/vulnerabilities i get a very different number.