# Palo Alto Networks Anomalies API

**Canonical:** https://apis.io/apis/palo-alto-networks/palo-alto-networks-anomalies-api/  
**Provider:** Palo Alto Networks — https://apis.io/providers/palo-alto-networks/  
**Base URL:** https://{firewall}/api/  
**Documentation:** https://pan.dev/panos/docs/xmlapi/

Palo Alto Networks Anomalies API is one of 741 APIs that [Palo Alto Networks](https://apis.io/providers/palo-alto-networks/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Anomalies. The published artifact set on APIs.io includes an OpenAPI specification.

Set the enterprise level settings to build standard training models for anomaly detection, alert disposition, and some other global settings such as the timeout before the user is locked out for inactivity and user attribution for alerts. Also, exclude trusted IP addresses when conducting tests for PCI compliance or penetration testing on your network. Any addresses included in this list do not generate alerts against the Prisma Cloud Anomaly Policies that detect unusual network activity such as the policies that detect internal port scan and port sweep activity, which are enabled by default.

## Machine-readable artifacts (1)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-anomalies-api-openapi.yml

## Other Palo Alto Networks APIs (12)

- [PAN-OS XML API](https://apis.io/apis/palo-alto-networks/pan-os-xml-api/)
- [PAN-OS OpenConfig API](https://apis.io/apis/palo-alto-networks/openconfig-api/)
- [Panorama API](https://apis.io/apis/palo-alto-networks/panorama-api/)
- [AutoFocus API (Deprecated)](https://apis.io/apis/palo-alto-networks/autofocus-api/)
- [Prisma SASE Service Status API](https://apis.io/apis/palo-alto-networks/prisma-sase-service-status-api/)
- [Cross-Platform Service Status API](https://apis.io/apis/palo-alto-networks/cross-platform-service-status-api/)
- [SASE Authentication Service API](https://apis.io/apis/palo-alto-networks/sase-authentication-service-api/)
- [Expedition API (Deprecated)](https://apis.io/apis/palo-alto-networks/expedition-api/)
- [VM-Series Licensing API](https://apis.io/apis/palo-alto-networks/vm-series-licensing-api/)
- [Palo Alto Networks 5G Deregistered Trend API](https://apis.io/apis/palo-alto-networks/palo-alto-networks-5g-deregistered-trend-api/)
- [Palo Alto Networks 5G Network Interconnects and Bandwidth API](https://apis.io/apis/palo-alto-networks/palo-alto-networks-5g-network-interconnects-and-bandwidth-api/)
- [Palo Alto Networks 5G Registered Trend API](https://apis.io/apis/palo-alto-networks/palo-alto-networks-5g-registered-trend-api/)

## Tags

Anomalies

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/palo-alto-networks/palo-alto-networks-anomalies-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/palo-alto-networks/.