"Invalid Rule" exception when saving a policy in Prisma Cloud

"Invalid Rule" exception when saving a policy in Prisma Cloud

0
Created On 01/11/19 23:40 PM - Last Modified 07/19/22 23:12 PM


Symptom


When creating a new policy or modifying an existing policy, the policy fails to save with the "Invalid Rule" exception.

User-added image

Example of a invalid RQL: config where cloud.type = 'gcp' AND api.name = 'gcloud-compute-networks-list'


Environment


Prisma Cloud

Cause


For Config policies, the RQL statement must contain either the api.name and json.rule parameters or the hostfinding.type parameter.  If the RQL statement is missing a required parameter, it will fail to save.

Resolution


Revise the RQL statement to include the required parameters.

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmbZCAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail