Prisma Cloud V2 Layout Rule

display for Prisma Cloud alerts.

Prisma Cloud by Palo Alto Networks

Details

IDPrisma_Cloud_V2_Layout_Rule
From Version6.10.0
Opens LayoutPrisma Cloud V2

Alert conditions (all must match)

Field Operator Value
{
  "id": "Prisma_Cloud_V2_Layout_Rule",
  "name": "Prisma Cloud V2 Layout Rule",
  "rule_id": "Prisma_Cloud_V2_Layout_Rule",
  "layout_id": "Prisma Cloud V2",
  "description": "display for Prisma Cloud alerts.",
  "rule_name": "Prisma Cloud V2 Layout Rule",
  "alerts_filter": {
    "filter": {
      "AND": [
        {
          "OR": [
            {
              "SEARCH_FIELD": "alert_type",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "AWS CloudTrail Misconfiguration"
            },
            {
              "SEARCH_FIELD": "alert_type",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "AWS EC2 Instance Misconfiguration"
            },
            {
              "SEARCH_FIELD": "alert_type",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "AWS IAM Policy Misconfiguration"
            },
            {
              "SEARCH_FIELD": "alert_type",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "Azure AKS Misconfiguration"
            },
            {
              "SEARCH_FIELD": "alert_type",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "Azure Network Misconfiguration"
            },
            {
              "SEARCH_FIELD": "alert_type",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "Azure SQL Misconfiguration"
            },
            {
              "SEARCH_FIELD": "alert_type",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "Azure Storage Misconfiguration"
            },
            {
              "SEARCH_FIELD": "alert_type",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "GCP Compute Engine Misconfiguration"
            },
            {
              "SEARCH_FIELD": "alert_type",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "GCP Kubernetes Engine Misconfiguration"
            },
            {
              "SEARCH_FIELD": "alert_type",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "Prisma Cloud - VM Alert Prioritization"
            },
            {
              "SEARCH_FIELD": "alert_type",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "Prisma Cloud"
            }
          ]
        }
      ]
    }
  },
  "fromVersion": "6.10.0"
}