Prisma Cloud : Cloud Security Assessment reports failing

• To resolve and fix the failing Cloud Security assessment reports on the Prisma Cloud UI. 

• Prisma Cloud
  • Alert --> Reports
  • UI
  • HAR trace

• There could be a couple of causes for this: 
  1. The report is failing due to a large number of accounts/account groups selected. 
  2. The report is generated successfully but the UI shows an "exclamation mark" instead of a download button. 

Case 1:- 

• In this case, one will see an error pop up on the UI either mentioning "too many accounts selected" or "too large of a timeframe". 
  • Alerts -> Reports -> Add Report

• Click Submit -> Notice Error on Far Upper right ( seen in screenshot below) 

• One can additionally capture this error by generating a HAR trace while reproducing the problem. 
• One will notice on the HAR that the API call to "https://api2.prismacloud.io/alert/report" fails with a 400 error. 
  • The "X-Redlock-Status" response header will have an error message " [{“i18nKey”:“ris_large_alert_count”,“severity”:“error”,“subject”:null}] "
  • The "x-redlock-request-id" can be essential to verify this from our SIEM tools. 

Case 2:
 

• After clicking Submit, one will notice the report generate successfully on the UI without any errors. 
• However, the report generated will have an "exclamation mark" instead of a download button. (see screenshot )
  • Alerts --> Report --> Add report --> Submit 

• This is because of a lower timeout value on the backend and increasing it will resolve the error.
• Customer would need a support ticket opened. 

• How to capture a HAR trace