topic Re: Unable to get output of 'show rule-hit-count...' via panxapi.py or xapi.py in Automation/API Discussions

Unable to get output of 'show rule-hit-count...' via panxapi.py or xapi.py

philiptecklenburg — Wed, 16 Oct 2019 23:13:04 GMT

Hi All,

Wondering if anyone has been able to successfully get the output of the following command via either the panxapi.py wrapper or via their own functions that make use of the xapi.py module:

PS C:\Program Files (x86)\Python37-32\Scripts> python .\panxapi.py -Xjro 'show rule-hit-count vsys vsys-name vsys1 rule-base security rules all'
op: error [code="17"]: " show -> rule-hit-count -> vsys -> vsys-name -> vsys1 unexpected here
show -> rule-hit-count -> vsys -> vsys-name is invalid"
PS C:\Program Files (x86)\Python37-32\Scripts>

I thought maybe I was doing something wrong while writing my own wrapper for xapi.py, but after using the panxapi.py wrapper I get the exact same response from a PA 820 running version 8.0.10.

It is probably also worth mentioning that this exact string can be run as a command on the 820 via SSH, and I receive the expected output.

All input welcome.

Thanks!

Re: Unable to get output of 'show rule-hit-count...' via panxapi.py or xapi.py

gfreeman — Thu, 17 Oct 2019 15:22:34 GMT

You'll need to specify the XML yourself for that command. There are multiple variables that you're specifying with this command, so the automatic XML-ification that the libraries do will fail.

Using debug cli on specified here, the XML the op command is sending on my firewall looks like this:

Re: Unable to get output of 'show rule-hit-count...' via panxapi.py or xapi.py

PhilTecklenburg — Thu, 17 Oct 2019 16:15:51 GMT

Thanks I'll give this a shot and send it in XML.