Query Palo Alto Firewall PA-5020 using Firemon

[padkumar4]

Hi

I am working on integrating Firemon with Palo Alto and need to query the Palo Alto for zones. Here's what I am trying to do.

Problem statement: I want to write a query that would give me the list of firewall rules with ("any" in "Destination zone" AND "Service" AND "Action" = accept ).

I am able to generate a query that will give me ("any" in "Destination zone" AND "Service" AND "Action" = accept) which is given below:

query: rule{disabled=false and destination.any = true and (application.any=true or application.objectcount is empty) and service.any=true and action='ACCEPT'}

This query works and give me the list of all rules with destination = any. How can I change it to destination zone =any.

Thanks

Padma