Prisma Cloud Discussions
Share ideas and post questions related to Prisma Cloud — the industry's most comprehensive cloud native security platform — and the compute capabilities available within it in this forum.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Prisma Cloud Discussions
Share ideas and post questions related to Prisma Cloud — the industry's most comprehensive cloud native security platform — and the compute capabilities available within it in this forum.
About Prisma Cloud Discussions
Share ideas and post questions related to Prisma Cloud — the industry's most comprehensive cloud native security platform — and the compute capabilities available within it in this forum.

Discussions

Welcome to the Prisma Cloud Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 4992 Views
  • 1 replies
  • 1 Likes

X-Forwarded-For

Hello dear, has anyone seen something similar to this: In Primsma-cloud enterprise edition when I create the rule in Defend --> Waas for an environment with kubernetes and using ingress-nginx-controller. In Monitor -->Rules-->Events, in the "IP" field, the ingress-nginx Balancer/reverse proxy address appears instead of the final client'...

Prisma Cloud Health Check via Cli

Dear Team, We currently configured Prisma Container Scan task as a Stage in one of our Pipeline. We are using Twist-cli and Jenkins to perform the image scanning in the stage. We wanted to skip this stage if Prisma is not accessible or available or facing any downtime. Is there any CLI command that we can use to check Prisma Health Status or ava...

Can't find api.name needed for RQL Query formation

I can't seem to find any api.name neither under the cloud.service: "Azure Security Center" or "Azure Defender for Cloud" relating to Defender Security Policies. I am trying to draft up an RQL to test Azure Security Center Policy Settings but unable to find anything related to it while forming RQL Query. Does Prisma Cloud ingest the Security Poli...

AJohri by L1 Bithead
  • 2069 Views
  • 1 replies
  • 0 Likes

Policies on AWS RDS Service

Is there a way to get a list of all Policies configured on AWS RDS Service? Our DB teams are asking for the list of Policies that they should consider while securely configuring DBs.

RBalla1 by L1 Bithead
  • 2721 Views
  • 4 replies
  • 0 Likes

[RQL] How to construct a query to investigate on all AWS Security Groups that has outbound to 0.0.0.0

Reference: https://docs.aws.amazon.com/cli/latest/reference/ec2/describe-security-groups.html RQL that is not working: config from cloud.resource where cloud.type = 'aws' AND api.name = 'describe-security-groups' AND json.rule = "IpPermissionsEgress[IpRanges[?any (CidrIp equals 0.0.0.0/0)]]" Does not seems to be right. Need RQL expert here!...

Prisma cloud rql join filter

How can I use the cloud account filter in an RQL query? I'm putting together a query to display which screen images are not in use and I would need to add the cloud account filter. My querys is:config from cloud.resource where api.name = 'aws-ecr-image' as X; config from cloud.resource where api.name = 'aws-ecs-describe-task-definition' as Y; ...

Resolved! Prism Cloud Compute Twistlock - Splunk Integration Test Error

I have configured Splunk alert integration into Prisma cloud compute version Twistlock with the Splunk HEC URL, token, and cacert, but while doing the test alert it is throwing the below error, has anyone encountered such an issue, or any suggestions, please? The Splunk HEC URL is correct and up and running. Error: alert.go:1092 Failed to send...

i.patel by L0 Member
  • 3466 Views
  • 2 replies
  • 0 Likes

Resolved! JSON Not showing up

I am currently facing an issue in JSON, while creating an RQL Query for a Policy. The policy requires checking MySQL Database Servers in Azure for the server parameter: audit_log_enabled and audit_log_events. The issue that I came across in RQL was the absence of "server parameter" in JSON of resources ingested onto Prisma Cloud through our Clou...

AJohri by L1 Bithead
  • 2805 Views
  • 1 replies
  • 0 Likes

Unknown command 'coderepo' Run 'twistcli --help' for usage

Hi, coderepo scan is returning command not found as below. Please suggest. ./twistcli coderepo scan $TWISTCLI_OPTS --user $REPOSCAN_USERNAME --password $REPOSCAN_PASSWORD --address $PRISMA_CLOUD_URL $REPO_NAME-$BRANCH_NAME --repository $REPO_NAME-$BRANCH_NAME --details --output-file $reportFile VERSION: 32.02.129 COMMANDS: support ...

Srinivas by L0 Member
  • 3226 Views
  • 3 replies
  • 0 Likes

Azure Active Directory - No Results

Trying to figure out why AAD configurations are not showing up in Prisma Cloud. Our scenario is this: We've connected Prisma to our Azure lab We've executed the TF module Some resources are showing up; however, the TF module doesn't show anything for Directory.Read.All or Directory. * (not wildcard, just stating no Directory entitlements) in ...

JV_GPS by L0 Member
  • 1456 Views
  • 2 replies
  • 0 Likes
  • 476 Posts
  • 61 Subscriptions
Top Liked Authors