User connected list

POST 
https://api.sase.paloaltonetworks.com/insights/v3.0/resource/query/mobileusers/gp/noc_current_connected_user_list

Retrieves a list of all users currently active on the GlobalProtect Gateway. If a DEM or ADEM license is present, the time range filter is used to compute the experience score.

Request

Header Parameters

X-PANW-Region stringrequired

CDL Region

Prisma-Tenant string

A Prisma-Tenant is a unique identifier for a tenant or a subtenant within a single or multi-tenant architecture, providing precise tenant management and resource allocation.

application/json

Bodyrequired

connection_methodstring
Type of connection
Possible values: [ep, gp]
Example: gp
edge_location_display_namestring
Name of PA location
Example: US West
event_timestringrequired
Time of the event
Example: 1709226000000
node_typenumber
Type of the node
Example: 49
platform_typestring
Platform name
Example: prisma_access
source_citystring
Name of city
Example: Santa Clara
source_countrystring
Name of country
Example: United States

Responses

200

OK

application/json

Schema

Schema

device_namestring

Device name

distancenumber

distance

is_connectedboolean

Is connected

is_degradedboolean

Indicates if experience degraded

last_login_timeinteger

Most recent login time of this user

latitudenumber

latitude

longitudenumber

longitude

pa_locationstring

Prisma Access location

usernamestring

Username

Example (auto)

{
  "data": [
    {
      "device_name": "John's MacBook",
      "distance": 15.5,
      "is_connected": true,
      "is_degraded": false,
      "last_login_time": 1709226000000,
      "latitude": 37.7749,
      "longitude": -122.4194,
      "pa_location": "US West",
      "username": "test_user"
    }
  ]
}

Example

{
  "data": [
    {
      "device_name": "John's MacBook",
      "distance": 15.5,
      "is_connected": true,
      "is_degraded": false,
      "last_login_time": 1709226000000,
      "latitude": 37.7749,
      "longitude": -122.4194,
      "pa_location": "US West",
      "username": "test_user"
    }
  ]
}

Authorization: http

name: Bearertype: httpscheme: bearer

• curl
• python
• go
• nodejs
• csharp
• php

• CURL

curl -L 'https://api.sase.paloaltonetworks.com/insights/v3.0/resource/query/mobileusers/gp/noc_current_connected_user_list' \
-H 'Content-Type: application/json' \
-H 'Accept: application/json' \
-H 'Authorization: Bearer <token>' \
-d '{
  "filter": {
    "rules": [
      {
        "operator": "last_n_hours",
        "property": "event_time",
        "values": [
          "5"
        ]
      }
    ]
  }
}'

Request Collapse all

Base URL

https://api.sase.paloaltonetworks.com

Auth

Bearer Token

Parameters

X-PANW-Region — headerrequired

Prisma-Tenant — header

Body required

• Example (from schema)
• Dashboard>Sase Health

{
  "filter": {
    "rules": [
      {
        "operator": "last_n_hours",
        "property": "event_time",
        "values": [
          "5"
        ]
      }
    ]
  }
}

ResponseClear

Click the Send API Request button above and see the response here!