XML API: Panorama: How to Create/Get/Update the field "Audit Comment" of a Security Policy rule?

HermanEdwards — Thu, 24 Feb 2022 23:38:18 GMT

Settings

Panorama version: 10.1 (latest)
When creating/updating a Security Policy rule (see attached images for more info), I'm able to add/update Audit comment for a rule via Web browser by following this guide https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-web-interface-help/policies/audit-comment-archive.html . However, I fail to use XML API to simulate the same behaviours.
On Panorama XML API request, there is no option to get/set the field "audit-comment". I followed this guide https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-panorama-api/get-started-with-the-pan-os-xml-api/explore-the-api/use-the-api-browser.html to explore all fields for a given Policy rule. There is no "comment" or "audit-comment" field.

What's expected:

Similar to how we can edit/read the Description field of a Security Policy rule, we should be able to edit/read the Audit comment field of a rule as well.
I believe we should have xpath like "/config/devices/entry[@name='localhost.localdomain']/device-group/entry[@name='paul']/pre-rulebase/security/rules/entry[@name='paul-feb-24']/audit-comment" to read or update here.

What's happening:

From viewing Chrome's network tab (see attached), you can see that we should be able to access "audit-comment" for a Policy rule. However, I cannot access that field via XML API browser or manually calling it via curl.
Could you tell me if this is something possible on Panorama?
- If yes, How do I access this Audit Comment field?
- If yes, Is this feature available from Panorama 8.0 as well?

Your help is much appreciated.

Re: XML API: Panorama: How to Create/Get/Update the field "Audit Comment" of a Security Policy rule?

HermanEdwards — Fri, 25 Feb 2022 03:29:17 GMT

Look like this should be posted in the API section instead. I will close this one and open a new one there.