Network Analyzer Query via REST API

[VKumar25]

By Vinay Kumar M, Senior Staff Engineer 

 

Purpose

The API which is to be used for Performing Config Search with Network RQL's - 'config from network ...'

 

Symptom

/search/config API - https://pan.dev/prisma-cloud/api/cspm/search-config/ 

does not work when the RQL/query passed in is Network Analyser RQL eg:

“config from network where source.network = UNTRUST_INTERNET and dest.resource.type = 'Instance' and dest.cloud.type = 'AWS'"

Error: 400 Bad Requests.

However, the same API works well for Simple Config RQL’s example: "config where api.name = 'azure-network-nic-list' "

Cause

The wrong endpoint is being used for the API call for performing config search with Network RQL's i.e. 'config from network...' The same is not reflected in the API Documentation yet, because the endpoint (/cnssearches) is owned by CNA team.

Additional Information

Please use below API  for Performing Config Search with Network RQL's - 'config from network ...'

curl 'https://api.<region>-01.network.prismacloud.io/cnssearches'; \

  -H 'Accept: application/json, text/plain, */*' \

  -H 'Accept-Language: en-GB,en-US;q=0.9,en;q=0.8' \

  -H 'Connection: keep-alive' \

  -H 'Content-Type: application/json' \

  -H 'Cookie: ajs_anonymous_id=e77bda9c-bf23-492c-a7eb-0e366f8d7af9; _ga=GA1.2.486439380.1659705563; intercom-id-oc3xi4bh=148af8f5-2caf-4ef6-bd09-19151dff4410; ajs_user_id=d8b5cd6b18194573ba8a0d69e815a9e3; mp_956569872348636f9bc2d62e4f838261_mixpanel=%7B%22distinct_id%22%3A%20%22d8b5cd6b18194573ba8a0d69e815a9e3%22%2C%22%24device_id%22%3A%20%221826e2919594c7-009f633a76b2b7-1b525635-15f900-1826e29195bd11%22%2C%22mp_lib%22%3A%20%22Segment%3A%20web%22%2C%22%24initial_referrer%22%3A%20%22https%3A%2F%2Fredlock.atlassian.net%2F%22%2C%22%24initial_referring_domain%22%3A%20%22redlock.atlassian.net%22%2C%22%24user_id%22%3A%20%22d8b5cd6b18194573ba8a0d69e815a9e3%22%2C%22mp_name_tag%22%3A%20%22d8b5cd6b18194573ba8a0d69e815a9e3%22%2C%22memsql_version%22%3A%20%227.6.5%22%2C%22id%22%3A%20%22d8b5cd6b18194573ba8a0d69e815a9e3%22%7D; x-aporeto-token=<token>; x-a3s-token=<token>' \

  -H 'Origin: https://app2.prismacloud.io'; \

  -H 'Referer: https://app2.prismacloud.io/'; \

  -H 'Sec-Fetch-Dest: empty' \

  -H 'Sec-Fetch-Mode: cors' \

  -H 'Sec-Fetch-Site: same-site' \

  -H 'User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Mobile Safari/537.36' \

  -H 'rl-debug: on' \

  -H 'sec-ch-ua: "Google Chrome";v="111", "Not(A:Brand";v="8", "Chromium";v="111"' \

  -H 'sec-ch-ua-mobile: ?1' \

  -H 'sec-ch-ua-platform: "Android"' \

  -H 'x-namespace: /806775452214917120' \

  --data-raw $'{"query":"config from network where source.network = UNTRUST_INTERNET and dest.resource.type = \'Instance\' and dest.cloud.type = \'AWS\'","timeRange":{"type":"to_now","value":"epoch"}}' \

  --compressed

About the Author

Vinay Kumar M is a seasoned professional with over 8 years of invaluable experience in the dynamic realm of cloud computing. As a Senior Staff Engineer, Vinay specializes in navigating the intricate landscape of Prisma Cloud and Compute, showcasing his expertise in ensuring seamless operations for accounts across the Asia-Pacific region.