topic Re: Search public ip in any resource in Prisma Cloud Discussions

Search public ip in any resource

vhdomingos — Fri, 18 Nov 2022 12:58:19 GMT

Hello everyone,

Is there any RQL that searches for a public ip in the cloud?

I don't know which resource is EC2, ALB...

I only have the public ip and I don't know how to find it.

TKS

Re: Search public ip in any resource

BCastillo — Fri, 18 Nov 2022 16:07:05 GMT

Hello,

Thank you for your question. I just wanted to follow up and confirm if you are trying to pull the public ip in the cloud for the specific resources like Ec2 and ALB?

Re: Search public ip in any resource

vhdomingos — Fri, 18 Nov 2022 22:47:11 GMT

Hi....

I only have the public ip and nothing else... I don't have any information anymore

Tks

Re: Search public ip in any resource

OOmotayo — Tue, 22 Nov 2022 02:03:08 GMT

Hello,

You can utilize the network RQL like the example below. This searches for internet traffic from public IPs to your Cloud Resources.

network from vpc.flow_record where source.publicnetwork IN ( 'Internet IPs' ).

If you have further questions, please provide more clarity and I'll be more than happy to get it answered for you.