topic Re: Adding a new firewall to existing log collector group via API in Automation/API Discussions

Adding a new firewall to existing log collector group via API

jasonrakers — Fri, 12 Apr 2019 16:53:42 GMT

Does any one know if there is an XML API call to add a new firewall to an existing Log Collector group, without needing to specify all the existing members of the LC group?

For instance...here is the XML debug when adding a new firewall to an existing group. Unfortunately, I need to include all of the other firewalls as well.

<request cmd="op" target="panorama">
<operations xml="yes">
<set>
<log-collector-group-preference-list>
<log-collector-group>GROUP</log-collector-group>
<collector-preference-list>
<entry>
<devices>
<entry name="existing1"/>
...
<entry name="existingN"/>

Re: Adding a new firewall to existing log collector group via API

nigelswift — Fri, 12 Apr 2019 17:30:38 GMT

Hey Jason,

Good on you for pulling the debug. Usually good info.

For configuration calls, we use the type=config calls. For setting configuration, we'd use action=set. The call to actually pull the config for log collector group is below.

/api/?type=config&action=get&xpath=/config/devices/entry[@name='localhost.localdomain']/log-collector-group

At this point I don't have a lab set up that I could directly test this against to actually get the syntax we need to set, but if you have some time I was able to get your contact info from our internal support site and would be happy to reach out if you have an opportunity to test a few calls with me on a call. If not and just the call above is sufficient and you'd like to figure out the rest on your own, that's fine as well. Let me know, it should be a pretty quick thing assuming you have management access to the Panorama.

Re: Adding a new firewall to existing log collector group via API

jasonrakers — Fri, 12 Apr 2019 18:09:19 GMT

Reach out, very curious if we can make this work!

This is what i am testing with..

Re: Adding a new firewall to existing log collector group via API

nigelswift — Fri, 12 Apr 2019 18:36:37 GMT

Hey Jason, if you want to just reply here with the xpath and element that we were able to determine was working for the call in case anyone else comes along and is looking for the answer.

Re: Adding a new firewall to existing log collector group via API

jasonrakers — Fri, 12 Apr 2019 18:41:28 GMT

Thank you so much for your help! Here is the API call used to update an existing LC group with a new firewall.

https://{{panorama}}/api/?type=config&action=set

&xpath=/config/devices/entry[@name='localhost.localdomain']/log-collector-group/entry[@name='{{LC-group-NAME}}']/logfwd-setting/devices&key={{panorama-key}}&element=<entry name="{{newfw}}"><collectors>

</collectors></entry>

I used Postman where {{ }} are variables for my environment.