Prisma Cloud RQL search to CSV
This script is supported under a "best effort" policy. Please see SUPPORT.md for details.
This script will run RQL search and take the results and format them into CSV (based on current CSV output on Investigate page)
Requirements and Dependencies
Python 3.7 or newer
OpenSSL 1.0.2 or newer
(if using on Mac OS, additional items may be nessessary.)
sudo easy_install pip
- Requests (Python library)
sudo pip install requests
- YAML (Python library)
sudo pip install pyyaml
Navigate to config/README.md. Use the example format to create a file named
configs.yml. Full path should be
Fill out your Prisma Cloud access key/secret, stack info, and RQL to be run. (Ignore filename - this will be used in future.)
To determine stack, look at your browser when access console (appX.prismacloud.io, where X is the stack number.
Change this to apiX.prismacloud.io and populate it in the configs.yml.
Or go here for more information: https://api.docs.prismacloud.io/