Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About FranciscoBreijo
About FranciscoBreijo
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
06-26-2020
6Posts
2Likes
3Solutions
Jun 26, 2020Last Visited
User
Activity
User
Profile
Latest posts by FranciscoBreijo
| Subject | Views | Posted |
|---|---|---|
| 932 | 06-10-2020 09:52 AM | |
| 1098 | 03-23-2020 06:40 AM | |
| 1746 | 03-23-2020 06:39 AM | |
| 1055 | 03-23-2020 06:34 AM | |
| 2591 | 11-21-2019 07:43 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 03-23-2020 06:39 AM | |
| 1 | 08-02-2019 08:42 AM |
User Badges
Public Statistics
| Date Registered | 08-02-2019 08:38 AM |
| Date Last Visited | 06-26-2020 06:28 PM |
| Total Messages Posted | 6 |
| Total Likes Received | 2 |
06-10-2020
09:52 AM
Can you confirm the exact ask? Are you looking for IAM resources not used in the last 30 days? Prisma Cloud is a resource centric approach, so there isn't a method to get all resources that meet a specific criteria.
... View more
03-23-2020
07:27 AM
Thanks for the response. Understood. This has to be done on the policy level by modifying the RQL. Makes sense as well to address the alerts on the default VPCs - which we had done.
... View more
03-23-2020
06:40 AM
Currently, there is no automated onboarding mechanism for AWS, which mimics our GCP capability. This is in the works, but a timeframe has not been defined at this moment.
... View more
03-23-2020
06:34 AM
You can leverage our Audit Policies with something along the below lines, in terms of RQL. event where operation IN ( 'AssociateElasticIp', 'RegisterElasticIp', 'UpdateElasticIp' ) This will create an alert anytime you have a user actually make a change to the EIP. Another way you can achieve this is by simply checking for instances that have a public IP. Though this will return existing systems that should or are known to have public IPs. config where api.name = 'aws-ec2-describe-instances' AND json.rule = publicIpAddress exists and publicIpAddress is not empty
... View more
11-22-2019
02:16 AM
Hi, Thanks!!! That query works fine. I think that I have two problems. The first one is that you comment with the merge about the nic id and the vm id. But, I think that the real problem form my query is in the tests that I made before, when the filter and variable syntaxis was wrong. In the filter phrasse need to use a double quote "" and the X, Y and Z variables need to be called with ['X']. Regards.
... View more
08-02-2019
08:42 AM
1 Kudo
@JReynolds1 , The RQL you are utilziing is a join, which is specifically used for aggregating 2 api calls, and cross-correlating the information. If you are only trying to filter results within a single API call, you don't need to use a join. For the RQL it seems you are trying to gather, the proper RQL is below. config where api.name = 'aws-ec2-describe-internet-gateways' AND json.rule = attachments[*].vpcId exists You can find the full RQL Guide at the following location, which can also provide some assistance/guidance on RQL moving forward. https://docs.paloaltonetworks.com/redlock/redlock-rql-reference.html
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-26-2020
06:28 PM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
