Download Deployed Defenders
Downloads information about deployed Defenders in CSV format. Use the query parameters to filter what data is returned.
Note: The results contain "hostname" even if you don't specify a "hostname" in the "fields" query parameter.
Refer to the following example cURL command:
$ curl -k \
-u <USER> \
-H 'Content-Type: text/csv' \
-X GET -o <FILENAME> \
Offsets the result to a specific report count. Offset starts from 0.
Number of reports to retrieve in a page. For PCCE, the maximum limit is 250. For PCEE, the maximum limit is 50. The default value is 50.
Retrieves the result for a search term.
Sorts the result using a key. Refer to the columns in the relevant Prisma Cloud Compute user interface to use them as sort keys.
Sorts the result in reverse order.
Filters the result based on collection names that you have defined in Prisma Cloud Compute.
Scopes the query by cloud provider.
Filters the result based on cloud account IDs.
Scopes the query by resource ID.
Scopes the query by cloud region.
Retrieves the fields that you need in a report. Use the list of fields you want to retrieve. By default, the result shows all fields of data.
Hostname is a name of a specific Defender to retrieve.
Roles are the defender api.Roles to filter.
Indicates whether to return only connected Defenders (true) or disconnected Defenders (false).
Indicates the Defender types to return (e.g., docker, dockerWindows, cri, etc).
Indicates whether to return a list of Defenders that are running the latest version of Prisma Cloud (true) or defenders with older versions (false).
SupportedVersion indicates only Defenders of supported versions should be fetched.
Scopes the query by cluster name.
Scopes the query by TAS cluster IDs.
Scopes the query by TAS blobstore scanning only Defenders (true) or TAS full coverage Defenders (false).
Scopes the query by TAS foundations.
Scopes the query to defenders which are using old certificate.
Scopes the query to defenders which are using expired certificate.
Indicates whether to return only defenders running on ARM64 architecture.
Indicates whether to return only defenders running as VPC Observer.