topic Response: set failed, may need to override template object first in Automation/API Discussions

Response: set failed, may need to override template object first

bcrogerz — Tue, 05 May 2020 04:57:34 GMT

Hi,

When I am trying to hit below API, I am getting error response, pasted below.

Payload:

{"type":"config","action":"set","key":"<Key>","xpath":"/config/devices/entry/vsys/entry/address-group/entry/[@name='apadr']","element":"<static><member>dstobj02</member>\n<member>dstobj01</member>\n</static>"}

Response:

'<response status="error" code="13"><msg><line>set failed, may need to override template object first</line></msg></response>'

Thanks!

Re: Response: set failed, may need to override template object first

gfreeman — Mon, 04 May 2020 23:03:26 GMT

First and foremost, you seem to have posted your API key on the internet, which is basically posting your password. Please change the password associated with that account as it is no longer secure.

As for the error, you are not specifying a specific vsys in the xpath, so that might be the error..? It could also be that if the address group "apadr" is currently a dynamic address group, since you're using a set I know PAN-OS will error out, just don't remember off the top of my head if it's this specific error or something else.

In general, it is highly recommended that you use one of the API libraries Palo Alto Networks has made available for free to make it easier to work with the API, such as pan-python (python), pandevice (python), or pango (golang).

Re: Response: set failed, may need to override template object first

bcrogerz — Thu, 07 May 2020 04:42:06 GMT

Hi,

I am using the same X-Path for the get objects and response is successful.