Search

You can use the Resource Query Language (RQL) to perform configuration checks across cloud services as well as gain real-time insights into user and network events to gain security visibility and create policy guardrails in your cloud environment. See the Prisma Cloud documentation for more information.

📄️ Perform Config Search

Returns the results of an RQL config query. With config queries, you can retrieve resource information, identify misconfigurations, gain operational insights, and uncover policy and compliance violations.

📄️ Perform Network Search

Perform a search against flow logs with an RQL query.

📄️ Perform Event Search

Returns the results of an RQL audit event query. You can use event queries to detect and investigate console and API access, monitor privileged activities, and detect account compromise and unusual user behavior in your cloud environment.

📄️ Aggregated Event Search

Returns the results of an RQL aggregated audit events query. This RQL query is similar to an RQL event query, but the data returned includes location and service data.

📄️ Filter Event Search Results

Filters the results of an event log search according to the specified parameters. You can use this call to refine the results of an aggregated search.

📄️ Get The Next Event Search Page

Returns the next page of search results, using a token provided from the previous page. Used for when there are over 100 search results for a given RQL query.

📄️ Get Raw Event Data

Returns the audit event data for the specified ID as raw metadata.

📄️ Autocomplete Search

Returns the possible options—including expressions, values, and operators—to append to a partial RQL query.

📄️ Search Alerts by ID

Returns search data that can be used to investigate the alert with the specified ID.

📄️ Get The Next Config Search Page

Returns the next page of search results, using a token provided from the previous page. Used for when there are over 100 search results for a given RQL query.

📄️ Download Event Search CSV

Performs an event log search with an RQL query and downloads the result as a CSV file.

📄️ Submit Search Config CSV Generation Job

Submits a job to generate an RQL config query results list that matches the constraints in the body parameters and is downloadable as a CSV file. Returns the job ID and job submission status.

📄️ Download Async Config Search CSV

Returns the results of an RQL Config query as a CSV. With Config queries, you can retrieve resource information, identify misconfigurations, gain operational insights, and uncover policy and compliance violations.