topic Re: PAN-OS XML API filtering question in Next-Generation Firewall Discussions

PAN-OS XML API filtering question

mgreer — Wed, 22 Feb 2023 23:19:09 GMT

Does the PAN-OS XML API for Global Protect previous users have a time filter option? I didn't see one documented.

This query returns all previous users in the firewalls logs, but really I just want the last hour:

https://<firewall _address>/api/?type=op&cmd=<show><global-protect-gateway><previous-user/></global-protect-gateway></show>&key=

Thanks for any help!

TomYoung — Fri, 24 Feb 2023 23:36:11 GMT

Looking at the API browser, only 3 filters are available: domain, gateway, and user. However, the result includes the login time and lifetime. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-panorama-api/pan-os-xml-api-use-cases/show-and-manage-globalprotect-users-api You could filter on the client side.

Thanks,

Tom