filter on request for pre-rulebase/security/rules

mugude — Mon, 05 Mar 2018 14:50:57 GMT

Is it possible to add filter on a request, i want to get pre-rulebase security rules which contains a key word, do this:

type=config&action=get&xpath=/config/devices/entry[\@name='localhost.localdomain']/device-group/entry[\@name='deviceGroupName']/pre-rulebase/security/rules

And in result i only want rules which contain "test" for example

Re: filter on request for pre-rulebase/security/rules

gfreeman — Tue, 06 Mar 2018 17:16:38 GMT

I'm not sure you can do "like" filtering in the request itself, but you can definitely do it programmatically if you just get all the security rules.

Here's how to do this in pandevice:

from pandevice import panorama, policies

pano = panorama.Panorama(host, username, password)
myGroup = panorama.DeviceGroup('deviceGroupName')
prb = policies.PreRulebase()

# Build the object tree.
pano.add(myGroup)
myGroup.add(prb)

# Get the answer.
all_rules = policies.SecurityRule.refreshall(prb)
answer = [x for x in all_rules if 'test' in x.name]

topic Re: filter on request for pre-rulebase/security/rules in Automation/API Discussions

filter on request for pre-rulebase/security/rules

Re: filter on request for pre-rulebase/security/rules