Table: prismacloud_report - Query Prisma Cloud reports using SQL

The Prisma Cloud report table in Steampipe provides you with information about reports within Prisma Cloud. This table allows you, as a security engineer or cloud administrator, to query report-specific details, including report name, status, type, and more. You can utilize this table to gather insights on reports, such as their configurations, compliance standards, and more. The schema outlines the various attributes of the Prisma Cloud report for you, including the report ID, name, and associated targets.

Table Usage Guide

The prismacloud_report table in Steampipe provides information about reports within Prisma Cloud. This table allows you to query details such as the report's name, status, type, and more, enabling you to manage and monitor your reports effectively.

Examples

Basic Info

Retrieve basic information about Prisma Cloud reports, such as report ID, name, type, and status. This query helps you to understand the overall configuration and details of your reports.

select
  id,
  name,
  type,
  status,
  created_on
from
  prismacloud_report;

select
  id,
  name,
  type,
  status,
  created_on
from
  prismacloud_report;

List of reports created by a specific user

Get a list of all reports created by a specific user. This is useful for identifying which reports were generated by which administrators or team members.

select
  id,
  name,
  type,
  created_by,
  created_on
from
  prismacloud_report
where
  created_by = 'admin_user';

select
  id,
  name,
  type,
  created_by,
  created_on
from
  prismacloud_report
where
  created_by = 'admin_user';

Reports with specific compliance standard

Identify reports associated with a specific compliance standard. This helps in ensuring that certain compliance requirements are being met by the reports.

select
  id,
  name,
  compliance_standard_id
from
  prismacloud_report
where
  name = 'CIS';

select
  id,
  name,
  compliance_standard_id
from
  prismacloud_report
where
  name = 'CIS';

Reports with scheduled runs

Retrieve reports that have scheduled runs. This helps in understanding the scheduling configurations related to your reports.

select
  id,
  name,
  last_scheduled,
  next_schedule
from
  prismacloud_report
where
  next_schedule is not null;

select
  id,
  name,
  last_scheduled,
  next_schedule
from
  prismacloud_report
where
  next_schedule is not null;

Get report counts

Get a list of reports along with their counts of various metrics. This can help in understanding the data within your reports.

select
  id,
  name,
  counts
from
  prismacloud_report;

select
  id,
  name,
  counts
from
  prismacloud_report;

Get policy details for the reports

Join the prismacloud_report and prismacloud_policy tables to get a list of reports along with the names of associated policies.

select
  r.id as report_id,
  r.name as report_name,
  p.policy_id,
  p.name as policy_name
from
  prismacloud_report r
  join prismacloud_policy p on r.id = p.policy_id;

select
  r.id as report_id,
  r.name as report_name,
  p.policy_id,
  p.name as policy_name
from
  prismacloud_report r
  join prismacloud_policy p on r.id = p.policy_id;

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- prismacloud

You can pass the configuration to the command with the --config argument:

steampipe_export_prismacloud --config '<your_config>' prismacloud_report