User Profile
neskiz
Regular Visitor
Joined 1 year ago
User Widgets
Contributions
Graphing trending
Hey, hoping to get some help. I have data that is input from a team weekly, and I am looking to visualize that data in a trend over time. I have not been able to get a good graphic of the data, and hoping to get some additional help. I am looking for something like a clustered column chart, but not sure that would be the best graphic since I have several rows in my data. Any insights would help a lot. thank you Metrix March, 7 2025 march 14 2025 Total source 1 20625 20411 Total critical 4787 4778 active 107 123 lost 779 823 unhealthy 115 114 poor communication 14 9 bad setup 21 9 less than 50 45 46 Critial Wth issue 0 0 Critical not report 0 0 Critical bad cat 2 0 0 critical bad cat 3 0 0 Critical bad 4 16 19 critical bad 5 2 3 1132 1180 18 22 Overall Health percentage 97.4 97.28 Overall up down from average 0.2854 0.1627Solved763Views0likes5CommentsCortex XDR Query API into power BI
Good afternoon and hope I can get some help on this. I am looking to connect Power BI to Cortex API to pull in data for reporting. Cortex has documentation showing that you can use the Start an XQL query to query data from a API call. The below script is what I am using which can work up to the queryId in step 1. From step 2, I get an error and cannot get the return I need. I have also included the resource link for Cortex documentation. Get XQL Query Quota • Cortex XDR REST API • Palo Alto Networks documentation portal // XQL query to fetch endpoint data XqlQuery = "dataset = endpoints | fields endpoint_id, endpoint_name, ip_address, last_seen, first_seen, endpoint_status", // Step 1: Get the query ID StartResponse = try Json.Document(Web.Contents( BaseUrl & "/public_api/v1/xql/start_xql_query/", [ Headers = [#"Content-Type"="application/json", #"x-xdr-auth-id"=ApiId, #"Authorization"=ApiKey], Content = Text.ToBinary("{ ""request_data"": { ""query"": """ & XqlQuery & """ } }") ] )) otherwise error "Failed to start XQL query. Check API credentials or URL.", QueryId = if Value.Is(StartResponse, type text) then StartResponse else StartResponse[reply], // Step 2: Get query results using streaming endpoint ResultsResponse = try Web.Contents( BaseUrl & "/public_api/v1/xql/get_query_results_stream/", [ Headers = [#"Content-Type"="application/json", #"x-xdr-auth-id"=ApiId, #"Authorization"=ApiKey, #"Accept-Encoding"="gzip"], Content = Text.ToBinary("{ ""request_data"": { ""query_id"": """ & QueryId & """, ""format"": ""json"" } }") ] ) otherwise error "Failed to retrieve query results. QueryId: " & QueryId, // Decompress with fallback DecompressedResults = try Binary.Decompress(ResultsResponse, Compression.GZip) otherwise ResultsResponse, JsonResults = Json.Document(DecompressedResults), Results = JsonResults[results], // Step 3: Convert results to a table TableFromResults = Table.FromList(Results, Splitter.SplitByNothing(), null, null, ExtraValues.Error), ExpandedResults = Table.ExpandRecordColumn(TableFromResults, "Column1", {"endpoint_id", "endpoint_name", "ip_address", "last_seen", "first_seen", "endpoint_status"}) in ExpandedResultsSolved7.5KViews0likes6Comments
Data Privacy
Microsoft Fabric Community and Privacy
To learn more about how we manage your data, please review the Microsoft Fabric Community Data Privacy guide.