QuestionQ25Verified/Investigating Security Issues with RQLCopy linkReport a problemAsk AstroTutorSave questionWhich RQL query returns a list of every Azure virtual machine that is not currently running?Aconfig from cloud.resource where api.name = 'azure-vm-list' AND json.rule = powerState contains "running"Bconfig from cloud.resource where api.name = 'azure-vm-list' AND json.rule = powerState = "running"Cconfig from cloud.resource where api.name = 'azure-vm-list* AND json.rule = powerState = "off"Dconfig from cloud.resource where api.name = 'azure-vm-list' AND json.rule = powerState does not contain "running"Show AnswerAnswerExplanationThe azure-vm-list API identifies Azure virtual machines, and powerState does not contain "running" filters out all VMs in a running power state while retaining all other power states. Prisma Cloud documents does not contain as a supported RQL operator and shows it used with azure-vm-list power-state fields.Learn morePrisma Cloud RQL OperatorsShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion