Cortex XDR API Limit

[MarcosHunt]

I'm trying to retrieve incidents on the Cortex XDR API but, after a few tests I'm getting 401 Unauthorized errors on the same key it worked a few requests before. Is there any "request limit" on API keys or accounts? 

Regards

[DmitriPoberejnii]

Did you ever figure this out? Facing same issue...{"reply": {"err_code": 401, "err_msg": "Public API request unauthorized", "err_extra": null}}

[KanwarSingh01]

Hi There,

Can you please let me know the api you have been using which you queried? Each API is well documented and defines the limit on the API call.

Please refer to the documentation of Cortex XDR API below:

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-api/cortex-xdr-apis/endpoint-manageme...

For example in the description of Get Endpoint you have a limitation of 100 endpoints only. You can design the call in such away that you can send the only a set of 100 endpoints in 2-5 seconds. This does the trick for us.

Thanks

[mteachout]

I ran into this as well. For me, the fix was updating the API_KEY_ID that was in the headers. That was mismatched with the value found in the ID column under API Keys.

curl -X POST https://api-{fqdn}/public_api/v1/endpoints/delete/ \

-H "x-xdr-auth-id:{API_KEY_ID}" \

-H "Authorization:{API_KEY}" \

-H "Content-Type:application/json" \

[efurlan]

Hi all,

I'm looking for a solution to implement a solution in powerbi to control a large number of asset. This "no more then 100" option is a very big problem for me. I not found a valid solution to extract my agent and import that in a BI. 

[philippe_boeij]

Did you search how to configure PowerBI to paginate?

I found for example: https://community.powerbi.com/t5/Power-Query/Looping-API-Call/td-p/1051251

Many API limit the number of results returned and split the query result in several chunks...