Table: panos_administrative_tag - Query Panorama Administrative Tags using SQL

The Panorama Administrative Tags are a feature of Palo Alto Networks Panorama that allows administrators to assign tags to various resources within the environment. These tags can be utilized to filter and sort resources, making it easier to manage large and complex environments. They can also be used in policy rules to enforce security measures based on the assigned tags.

Table Usage Guide

The panos_administrative_tag table provides insights into the Administrative Tags within the Palo Alto Networks Panorama. As a network administrator, explore tag-specific details through this table, including the tag name and color. Utilize it to uncover information about tags, such as those assigned to specific resources, allowing for better management and organization of the Panorama environment.

Important Notes

For a full reference on mapping color codes to color names, please refer to: https://registry.terraform.io/providers/PaloAltoNetworks/panos/latest/docs/resources/administrative_tag.

Examples

Basic info

Explore which administrative tags are currently in use. This can help in managing and organizing system resources more effectively.

select
  name,
  color,
  comment
from
  panos_administrative_tag;

select
  name,
  color,
  comment
from
  panos_administrative_tag;

List administrative tags containing a specific color

Explore which administrative tags are associated with a specific color. This can be useful in organizing and categorizing your tags based on color coding for easy identification and management.

select
  name,
  color,
  comment
from
  panos_administrative_tag
where
  color = 'color4';

select
  name,
  color,
  comment
from
  panos_administrative_tag
where
  color = 'color4';

List administrative tags for a specific `vsys`

Explore the administrative tags associated with a specific system. This helps in identifying and organizing resources in a network for better management and control.

select
  name,
  color,
  comment
from
  panos_administrative_tag
where
  vsys = 'vsys1';

select
  name,
  color,
  comment
from
  panos_administrative_tag
where
  vsys = 'vsys1';

List administrative tags for a Panorama `device group`

Explore the administrative tags associated with a specific device group in Panorama, allowing you to understand and manage the group's settings and comments.

select
  name,
  color,
  comment
from
  panos_administrative_tag
where
  device_group = 'group1';

select
  name,
  color,
  comment
from
  panos_administrative_tag
where
  device_group = 'group1';

Schema for panos_administrative_tag

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form.
color	text		Specifies the color ID for the tag.
comment	text		Specifies a label or description to describe for what the tag is used.
device_group	text	=	[Panorama] The device group location (default: shared).
name	text	=	An unique identifier of the tag.
sp_connection_name	text	=, !=, ~~, ~~, !~~, !~~	Steampipe connection name.
sp_ctx	jsonb		Steampipe context in JSON form.
vsys	text	=	[NGFW] The vsys the address object belongs to (default: vsys1).

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- panos

You can pass the configuration to the command with the --config argument:

steampipe_export_panos --config '<your_config>' panos_administrative_tag