topic Re: Panorama XML Edit API in Automation/API Discussions

Panorama XML API

tgarrett — Wed, 29 Jun 2011 18:28:53 GMT

Is the XML API on Panorama limited to the same API as the devices? I discovered if I switch the context in the Panorama web console using the "Context" dropdown and then issue an XML API call like:

https://PANORAMA/esp/restapi.esp?type=config&key=KEYVALUE&action=show

https://PANORAMA/esp/restapi.esp?type=config&key=KEYVALUE&action=get

it acts exactly as if I had issued it to a device, returning that device's running or candidate configuration. Is there an XML API parameter in Panorama to switch the device context or query for multiple devices' configurations at once?

Also, is there any way to retrieve such items as the user ID agent user/group cache or the current routing table via any of the XML API calls? We would like to be able to gather this type of information from Panorama or the individual devices but preferably centralized and without logging into the CLI for each device.

Panorama XML Edit API

ananthkp92 — Mon, 02 Oct 2017 20:18:04 GMT

Hi,

I am trying to edit multiple objects within a single rule using the Panorama XML API. I am able to edit (update) one object at a time. Is it possible to edit multiple objects using a single API call?

Thanks

Re: Panorama XML Edit API

nigelswift — Mon, 02 Oct 2017 20:19:49 GMT

You can, you'd just have to modify your xpath and element accordingly to match the whole configuration you're passing in. Can you provide more detail on what exactly you're trying to change?

Re: Panorama XML Edit API

ananthkp92 — Mon, 02 Oct 2017 20:24:14 GMT

For example if I want to change the destination zone and the action at the same time using a single api call. Is it possible?

Re: Panorama XML Edit API

ananthkp92 — Mon, 02 Oct 2017 20:32:06 GMT

According to the documentation if I want to change a single object( eg. application) the xpath will be

xpath=/config/devices/entry/vsys/entry/rulebase/security/rules/entry[@name='rule1']/appl

ication

and element will be

element=<application><member>app-name</member></application>

But my requirement is to change multiple objects ( eg. application and action) using a single api call. Is it possible
? If yes, what will be the xpath?

Re: Panorama XML Edit API

nigelswift — Mon, 02 Oct 2017 20:46:09 GMT

Your xpath would look something like:

xpath=/config/devices/entry/vsys/entry/rulebase/security/rules/entry[@name='rule1']

And your element would include both configuration for application and destination, something like:

<application><member>app-name</member></application><destination><member>any</member></destination>

Re: Panorama XML Edit API

ananthkp92 — Mon, 02 Oct 2017 21:01:26 GMT

I tried that but I am getting error 12

Edit breaks config validity