steampipe plugin install panos

Table: panos_administrative_tag - Query Panorama Administrative Tags using SQL

The Panorama Administrative Tags are a feature of Palo Alto Networks Panorama that allows administrators to assign tags to various resources within the environment. These tags can be utilized to filter and sort resources, making it easier to manage large and complex environments. They can also be used in policy rules to enforce security measures based on the assigned tags.

Table Usage Guide

The panos_administrative_tag table provides insights into the Administrative Tags within the Palo Alto Networks Panorama. As a network administrator, explore tag-specific details through this table, including the tag name and color. Utilize it to uncover information about tags, such as those assigned to specific resources, allowing for better management and organization of the Panorama environment.

Important Notes

Examples

Basic info

Explore which administrative tags are currently in use. This can help in managing and organizing system resources more effectively.

select
name,
color,
comment
from
panos_administrative_tag;
select
name,
color,
comment
from
panos_administrative_tag;

List administrative tags containing a specific color

Explore which administrative tags are associated with a specific color. This can be useful in organizing and categorizing your tags based on color coding for easy identification and management.

select
name,
color,
comment
from
panos_administrative_tag
where
color = 'color4';
select
name,
color,
comment
from
panos_administrative_tag
where
color = 'color4';

List administrative tags for a specific vsys

Explore the administrative tags associated with a specific system. This helps in identifying and organizing resources in a network for better management and control.

select
name,
color,
comment
from
panos_administrative_tag
where
vsys = 'vsys1';
select
name,
color,
comment
from
panos_administrative_tag
where
vsys = 'vsys1';

List administrative tags for a Panorama device group

Explore the administrative tags associated with a specific device group in Panorama, allowing you to understand and manage the group's settings and comments.

select
name,
color,
comment
from
panos_administrative_tag
where
device_group = 'group1';
select
name,
color,
comment
from
panos_administrative_tag
where
device_group = 'group1';

Schema for panos_administrative_tag

NameTypeOperatorsDescription
_ctxjsonbSteampipe context in JSON form, e.g. connection_name.
colortextSpecifies the color ID for the tag.
commenttextSpecifies a label or description to describe for what the tag is used.
device_grouptext=[Panorama] The device group location (default: shared).
nametext=An unique identifier of the tag.
vsystext=[NGFW] The vsys the address object belongs to (default: vsys1).

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- panos

You can pass the configuration to the command with the --config argument:

steampipe_export_panos --config '<your_config>' panos_administrative_tag