Expport all resource information with tags

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Expport all resource information with tags

L0 Member

Hello,

I'm trying to export information for all resource.

 

"/resource/scan_info"

or

"/v2/resource/scan_info"

 

do you know how I can recover --> resourceConfigJson

I can't manage to retrieve tag information from azure for example and prisma web in the api.

it takes a long time to retrieve all the information - is there a way to generate a csv like with alerts?

 

 

3 REPLIES 3

L3 Networker

Hi PCouedel,

Allow me to share some pertinent information about gathering asset information.

  1.  The /resource API endpoint has been deprecated (See https://pan.dev/prisma-cloud/api/cspm/get-resource/)
  2. Its replacement , also mentioned at the above URL is Get Asset (See https://pan.dev/prisma-cloud/api/cspm/get-asset-details-by-id/)
  3. Both of those endpoints are designed to retrieve details about a single cloud object

If you are interested in retrieving lots of objects , the best choice is to use the Investigate page where you can retrieve objects based on tags and other properties or metatdata.

 

My team has recently published an article about gathering large amounts of data using scripting and API calls.

See: https://live.paloaltonetworks.com/t5/prisma-cloud-articles/best-practices-for-scripting-rql-queries/...

 

You would use the Investigate page to validate some of your search results on a smaller scale. Then you can follow the implementation of the script to gather results greater than 100k.

 

Please let me know how this works out.

Regards,

Brandon

 

Brandon Goldstein, Sr. Customer Success Engineer, Prisma Cloud | PCCSE, GCP PCSE

Hello,

Its replacement , also mentioned at the above URL is Get Asset (See https://pan.dev/prisma-cloud/api/cspm/get-asset-details-by-id/)

thank you for your solution, but how can I retrieve the unifiedAssetId for all the assets?

L3 Networker

Hi,

The mentioned API call is only used to query and respond with detail about a single resource. It is not meant to be used for returning large volumes of data.

 

In your original request you asked about finding tags on Azure resources. An example RQL you could start with on the investigate page is:

 

config from cloud.resource where cloud.type = 'azure' AND tag ( 'string' ) exists

 

If you are looking for information about tags, from a long list of resources, you don't need asset IDs.

 

Last, I'd like to recommend signing up for a free RQL training webinar where you'll be able to interact and ask questions live. Please have a look at this link and register for one that works for you:

https://paloaltonetworks.zoom.us/webinar/register/WN_biM82jcmTiGuQxp5NmOQ7w#/registration

 

Regards,

Brandon Goldstein, Sr. Customer Success Engineer, Prisma Cloud | PCCSE, GCP PCSE
  • 644 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!