PanOS7.1 Panorama API how can I find out if the Device group is locked?

reuven.attias — Wed, 18 May 2016 07:56:45 GMT

Re: PanOS7.1 Panorama API how can I find out if the Device group is locked?

btorresgil — Wed, 18 May 2016 20:34:39 GMT

You can get all locks using the operational command API.

For example:

https://<panorama>/api/?key=<your-API-key>&type=op&cmd=<show><commit-locks/></show>

Note: That API call will retreive the commit locks. For config locks, change <commit-locks/> to <config-locks/>.

The following text is an example response from that API call perfomed on Panorama 7.1.0. There are two locks in the example output below. You can tell by the lines in red that one of these locks is global (shared) and one of these locks is specific to a device-group called "My Device Group".

<response status="success">
    <result>
        <commit-locks>
            <entry name="admin">
                <type>dg</type>
                <name>My Device Group</name>
                <created>2016/05/18 20:17:41</created>
                <last-activity>2016/05/18 20:17:41</last-activity>
                <loggedin>yes</loggedin>
                <comment>
                    <![CDATA[This is a device-group lock]]>
                </comment>
            </entry>
            <entry name="admin">
                <type>shared</type>
                <name>shared</name>
                <created>2016/05/18 20:17:43</created>
                <last-activity>2016/05/18 20:17:43</last-activity>
                <loggedin>yes</loggedin>
                <comment>
                    <![CDATA[This is a global (shared) lock]]>
                </comment>
            </entry>
        </commit-locks>
    </result>
</response>

topic Re: PanOS7.1 Panorama API how can I find out if the Device group is locked? in Automation/API Discussions

PanOS7.1 Panorama API how can I find out if the Device group is locked?

Re: PanOS7.1 Panorama API how can I find out if the Device group is locked?