topic Re: Get Push To Device summary via API in Automation/API Discussions

Get Push To Device summary via API

abedJawhar — Thu, 06 Jan 2022 19:57:35 GMT

Hi,

I am trying to automate the push to device proccess through Panorama, I know that the xml API call for tat is commit all, but I was trying to find an API call that would shouw the device groups and templates that will be pushed (trying to get the values that appear in the dialog labeled "Push To Device" when you press on push to device in the GUI).

When I inspect the network calls in the browser, I get this request:

{"action":"PanDirect","method":"run","data":["477deaaf37548a06bfdf2637a05a92b2","ConfigChangeDirect.getInitialPushScope",["no"]],"type":"rpc","tid":85}

And the JSON response body is basically what I need, however when I use the debug page on Panorama, it does not show me this request or its response.

I know we can get the commit change summary from the xml API but I was hoping there would be a similar call for the push summary

Any one tried to do this before and succeeded? Is it all possible?

We're running Panorama 9.1!

Re: Get Push To Device summary via API

JimmyHolland — Fri, 07 Jan 2022 10:08:46 GMT

Hi @abedJawhar, what is the goal, because I don't quite understand, sorry. You mentioned the "values from the Push to Devices dialog box", so do you mean you want to make an API call that tells you: which Device Groups have changes committed in Panorama which have not yet been pushed to the NGFWs?

Re: Get Push To Device summary via API

abedJawhar — Fri, 07 Jan 2022 14:10:58 GMT

Yes that is exactly correct.. Not just device groups, but also templates and templates stacks that have been committed but not yet pushed to the firewalls!

Re: Get Push To Device summary via API

JimmyHolland — Thu, 03 Feb 2022 17:21:23 GMT

I think I would do this by looking at the status, rather than try to mimic the commit dialog box functionality.

For example, use https://{{host}}/api/?key={{key}}&type=op&cmd=<show><devicegroups/></show> to check

<shared-policy-status> per device, looking for Out of Sync.

Similarly, use either https://{{host}}/api/?key={{key}}&type=op&cmd=<show><template-stack/></show> or https://{{host}}/api/?key={{key}}&type=op&cmd=<show><templates/></show> per device, and look for <template-status> value of Out of Sync.

That should allow you to build a list of devices which are out of sync, and therefore require their DG or Template/Stack to be pushed. Hope that helps?

Re: Get Push To Device summary via API

abedJawhar — Thu, 03 Feb 2022 18:42:38 GMT

Thanks for the reply @JimmyHolland ! That works!