topic Re: Cortex XDR API Limit in Automation/API Discussions

Cortex XDR API Limit

MarcosHunt — Mon, 13 Apr 2020 09:25:58 GMT

I'm trying to retrieve incidents on the Cortex XDR API but, after a few tests I'm getting 401 Unauthorized errors on the same key it worked a few requests before. Is there any "request limit" on API keys or accounts?

Regards

Re: Cortex XDR API Limit

DmitriPoberejnii — Fri, 02 Oct 2020 18:42:50 GMT

Did you ever figure this out? Facing same issue...{"reply": {"err_code": 401, "err_msg": "Public API request unauthorized", "err_extra": null}}

Re: Cortex XDR API Limit

KanwarSingh01 — Tue, 24 Nov 2020 21:56:05 GMT

Hi There,

Can you please let me know the api you have been using which you queried? Each API is well documented and defines the limit on the API call.

Please refer to the documentation of Cortex XDR API below:

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-api/cortex-xdr-apis/endpoint-management.html

For example in the description of Get Endpoint you have a limitation of 100 endpoints only. You can design the call in such away that you can send the only a set of 100 endpoints in 2-5 seconds. This does the trick for us.

Thanks

Re: Cortex XDR API Limit

mteachout — Fri, 08 Jan 2021 16:03:01 GMT

I ran into this as well. For me, the fix was updating the API_KEY_ID that was in the headers. That was mismatched with the value found in the ID column under API Keys.

curl -X POST https://api-{fqdn}/public_api/v1/endpoints/delete/ \

-H "x-xdr-auth-id:{API_KEY_ID}" \

-H "Authorization:{API_KEY}" \

-H "Content-Type:application/json" \

Re: Cortex XDR API Limit

efurlan — Wed, 22 Jun 2022 12:55:33 GMT

Hi all,

I'm looking for a solution to implement a solution in powerbi to control a large number of asset. This "no more then 100" option is a very big problem for me. I not found a valid solution to extract my agent and import that in a BI.

Re: Cortex XDR API Limit

philippe_boeij — Thu, 23 Jun 2022 09:32:20 GMT

Did you search how to configure PowerBI to paginate?

I found for example: https://community.powerbi.com/t5/Power-Query/Looping-API-Call/td-p/1051251

Many API limit the number of results returned and split the query result in several chunks...