topic Re: Writing Tags to Address Objects via API in Automation/API Discussions

Writing Tags to Address Objects via API

jessica_ferguson_snc — Tue, 10 Feb 2015 01:37:32 GMT

Hey all,

I have just started playing around with the API in Panorama. I am trying to write an address object with a tag.

I dumped an object and it looks like so:

</tag>

</entry>

</result>

</response>

When I try and write a new object I am using this
https://x.x.x.x/api/?type=config&action=set&key=<insert-key-here>&xpath=/config/devices/entry[@name='localhost.localdomain']/device-group/entry[@name='All Firewalls']/address&element=<entry name="blahdeblah"><fqdn>blahdablah.com.com</fqdn><tag><member>IOC23446567</member></tag></entry>
What I am getting back is this.

<response status="error" code="12">
     <msg>
          <line>
          <line>
               <![CDATA[ -> tag has unexpected text. ]]>
          </line>
          <line>
               <![CDATA[ -> tag is invalid ]]>
          </line>
          </line>
     </msg>
</response>

Any Thoughts as to what I am doing wrong?

--Jess

Re: Writing Tags to Address Objects via API

cpainchaud — Tue, 10 Feb 2015 10:53:13 GMT

are you using PANOS 6+ ?

Re: Writing Tags to Address Objects via API

jessica_ferguson_snc — Tue, 10 Feb 2015 16:30:22 GMT

Yep, 6.1

Re: Writing Tags to Address Objects via API

bat — Tue, 10 Feb 2015 22:17:23 GMT

Could you please confirm if that tag already exists on the firewall ?

I just tried the following command and it worked:

https://10.66.18.85/api?type=config&action=set&key=<key>&xpath=/config/devices/entry[@name="localhost.localdomain"]/vsys/entry[@name="vsys1"]/address/entry[@name="dmz-L4"]&element=<ip-netmask>1.1.1.1/32</ip-netmask><tag><member>internal</member></tag>