Table: panos_administrative_tag - Query Panorama Administrative Tags using SQL
The Panorama Administrative Tags are a feature of Palo Alto Networks Panorama that allows administrators to assign tags to various resources within the environment. These tags can be utilized to filter and sort resources, making it easier to manage large and complex environments. They can also be used in policy rules to enforce security measures based on the assigned tags.
Table Usage Guide
The panos_administrative_tag
table provides insights into the Administrative Tags within the Palo Alto Networks Panorama. As a network administrator, explore tag-specific details through this table, including the tag name and color. Utilize it to uncover information about tags, such as those assigned to specific resources, allowing for better management and organization of the Panorama environment.
Important Notes
- For a full reference on mapping
color
codes tocolor
names, please refer to: https://registry.terraform.io/providers/PaloAltoNetworks/panos/latest/docs/resources/administrative_tag.
Examples
Basic info
Explore which administrative tags are currently in use. This can help in managing and organizing system resources more effectively.
select name, color, commentfrom panos_administrative_tag;
select name, color, commentfrom panos_administrative_tag;
List administrative tags containing a specific color
Explore which administrative tags are associated with a specific color. This can be useful in organizing and categorizing your tags based on color coding for easy identification and management.
select name, color, commentfrom panos_administrative_tagwhere color = 'color4';
select name, color, commentfrom panos_administrative_tagwhere color = 'color4';
List administrative tags for a specific vsys
Explore the administrative tags associated with a specific system. This helps in identifying and organizing resources in a network for better management and control.
select name, color, commentfrom panos_administrative_tagwhere vsys = 'vsys1';
select name, color, commentfrom panos_administrative_tagwhere vsys = 'vsys1';
List administrative tags for a Panorama device group
Explore the administrative tags associated with a specific device group in Panorama, allowing you to understand and manage the group's settings and comments.
select name, color, commentfrom panos_administrative_tagwhere device_group = 'group1';
select name, color, commentfrom panos_administrative_tagwhere device_group = 'group1';
Schema for panos_administrative_tag
Name | Type | Operators | Description |
---|---|---|---|
_ctx | jsonb | Steampipe context in JSON form. | |
color | text | Specifies the color ID for the tag. | |
comment | text | Specifies a label or description to describe for what the tag is used. | |
device_group | text | = | [Panorama] The device group location (default: shared). |
name | text | = | An unique identifier of the tag. |
sp_connection_name | text | =, !=, ~~, ~~*, !~~, !~~* | Steampipe connection name. |
sp_ctx | jsonb | Steampipe context in JSON form. | |
vsys | text | = | [NGFW] The vsys the address object belongs to (default: vsys1). |
Export
This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.
You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh
script:
/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- panos
You can pass the configuration to the command with the --config
argument:
steampipe_export_panos --config '<your_config>' panos_administrative_tag