https://github.com/paloaltonetworks/pc-rql-search
Python Script for Prisma Cloud CSPM to run RQL queries and record results in a CSV file
https://github.com/paloaltonetworks/pc-rql-search
cloud prisma prisma-cloud prisma-cloud-api
Last synced: 19 days ago
JSON representation
Python Script for Prisma Cloud CSPM to run RQL queries and record results in a CSV file
- Host: GitHub
- URL: https://github.com/paloaltonetworks/pc-rql-search
- Owner: PaloAltoNetworks
- License: isc
- Created: 2022-10-07T16:28:31.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2025-01-28T18:04:47.000Z (4 months ago)
- Last Synced: 2025-04-07T13:38:07.097Z (about 1 month ago)
- Topics: cloud, prisma, prisma-cloud, prisma-cloud-api
- Language: Python
- Homepage:
- Size: 65.4 KB
- Stars: 5
- Watchers: 4
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Support: SUPPORT.md
Awesome Lists containing this project
README
# Prisma Cloud RQL search to CSV
This script is supported under a "best effort" policy. Please see SUPPORT.md for details.
Version: *3.1*
### Summary
This script will run RQL search and take the results and format them into CSV (based on current CSV output on Investigate page)
### Requirements and Dependencies
1. Python 3.7 or newer
2. OpenSSL 1.0.2 or newer
(if using on Mac OS, additional items may be nessessary.)
3. Pip
```sudo easy_install pip```
4. Install dependencies
```pip install -r requirements.txt```
### Configuration
1. Navigate to config/README.md. Use the example format to create a file named ```configs.yml```. Full path should be ```config/configs.yml```
2. Fill out your Prisma Cloud access key/secret, stack info, and RQL to be run.
*To determine stack, look at your browser when access console (appX.prismacloud.io, where X is the stack number.
Change this to apiX.prismacloud.io and populate it in the configs.yml.
Or go here for more information:* https://api.docs.prismacloud.io/
### Run
For generic config searches
```
python config.py
```
For config from network searches
```
python network.py
```