Search
You can use the Resource Query Language (RQL) to perform configuration checks across cloud services as well as gain real-time insights into user and network events to gain security visibility and create policy guardrails in your cloud environment. See the Prisma Cloud documentation for more information.
📄️ Perform Network Search
Perform a search against flow logs with an RQL query.
📄️ Search Alerts by ID
Returns search data that can be used to investigate the alert with the specified ID.
📄️ Perform Config Search by Query
Returns the results of an RQL config query. With config queries, you can retrieve resource information, identify misconfigurations, gain operational insights, and uncover policy and compliance violations.
📄️ Download Config Search as CSV
Returns the results of an RQL Config query as a CSV. With Config queries, you can retrieve resource information, identify misconfigurations, gain operational insights, and uncover policy and compliance violations.
📄️ Perform Config Search by Search Id
Returns the results of an RQL config query. With config search Id, you can retrieve resource information, identify misconfigurations, gain operational insights, and uncover policy and compliance violations.
📄️ Perform Config Search
Returns the results of an RQL config query. With config queries, you can retrieve resource information, identify misconfigurations, gain operational insights, and uncover policy and compliance violations.
📄️ Submit Search Config CSV Generation Job
Submits a job to generate an RQL config query results list that matches the constraints in the body parameters and is downloadable as a CSV file. Returns the job ID and job submission status.
📄️ Download Async Config Search CSV
Returns the results of an RQL Config query as a CSV. With Config queries, you can retrieve resource information, identify misconfigurations, gain operational insights, and uncover policy and compliance violations.
📄️ Get The Next Config Search Page
Returns the next page of search results, using a token provided from the previous page. Used for when there are over 100 search results for a given RQL query.
📄️ Perform Event Search
Returns the results of an RQL audit event query. You can use event queries to detect and investigate console and API access, monitor privileged activities, and detect account compromise and unusual user behavior in your cloud environment.
📄️ Aggregated Event Search
Returns the results of an RQL aggregated audit events query. This RQL query is similar to an RQL event query, but the data returned includes location and service data.
📄️ Filter Event Search Results
Filters the results of an event log search according to the specified parameters. You can use this call to refine the results of an aggregated search.
📄️ Download Event Search CSV
Performs an event log search with an RQL query and downloads the result as a CSV file.
📄️ Get The Next Event Search Page
Returns the next page of search results, using a token provided from the previous page. Used for when there are over 100 search results for a given RQL query.
📄️ Get Raw Event Data
Returns the audit event data for the specified ID as raw metadata.
📄️ Autocomplete Search
Returns the possible options—including expressions, values, and operators—to append to a partial RQL query.