Focus

Prisma Cloud Compute Edition Administrator’s Guide

Import and export individual rules

Table of Contents

Import and export individual rules

Prisma Cloud lets you import and export rules from one Console to another. Every rule created in Prisma Cloud under the Defend
section has copy and export buttons in the Actions
menu. An import button is located at the bottom of every rule table.

Copying rules

To copy a rule:

Go to Defend > Runtime > {Vulnerabilities | Compliance | Access}
.

Click Actions > Copy
for the rule you want to copy.

A dialog box named Edit copy of….
opens.

Make any desired changes to the copied rule.

Click Save
.

Exporting rules

Click Actions > Export
next to any rule to export it in json format.

Example

{
  "name": "Default - ignore Prisma Cloud components",
  "owner": "system",
  "modified": "2017-05-31T20:47:21.573Z",
  "effect": "alert",
  "resources": {
    "hosts": [
      "*"
    ],
    "images": [
      "docker.io/twistlock/private:console*"
    ],
    "labels": [
      "*"
    ],
    "containers": [
      "twistlock_console"
    ],
    "services": []
  },
  .
  .
  .
}

Importing rules

A rule can be imported into Console in JSON format. To capture a rule in JSON format, use the export function described above.

Custom runtime rules

ATT&CK Explorer

Prisma Cloud Compute Edition Administrator’s Guide

Import and export individual rules

Import and export individual rules

Copying rules

Exporting rules

Importing rules

Recommended For You