topic Re: Commit-All to Specific Device Using API in Powershell in General Topics

Commit-All to Specific Device Using API in Powershell

OwenFuller — Tue, 30 Nov 2021 18:30:56 GMT

I am using Powershell to make API requests to which cause various commands to be executed on specific s. I would like to do a commit-all to a specific firewall, not the entire DG/template stack. The documentation Commit-All (paloaltonetworks.com) lists the following command:

curl -X GET "https://<panorama>/api/?key=apikey&type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry name="<device-group-name>"><devices><entry name="<serial_number>"></devices><entry/></device-group></shared-policy></commit-all>"

However, when I try this (using Invoke-RestMethod in Powershell as well as just trying in my web browser), I get an error saying "Request is not a valid XML."

Can anyone help me out w/ the syntax?

Re: Commit-All to Specific Device Using API in Powershell

TomYoung — Tue, 30 Nov 2021 20:37:38 GMT

Hi @OwenFuller ,

You can verify the XMP path by logging into the XML API Browser of Panorama at x.x.x.x/api. Then drill down into the menu tree (e.g., Commit > all > shared-policy etc.) and you will see the XML API URL on the bottom of the web page.

Thanks,

Tom

Re: Commit-All to Specific Device Using API in Powershell

OwenFuller — Tue, 30 Nov 2021 21:12:09 GMT

Thanks for the suggestion. Unfortunately, the guidance at /api doesn't get that granular for commit-all.

It turns out that the answer was to add a </entry> tag after the serial number entry as shown:

Then, to get it to run properly in Powershell, add backticks to escape quotation marks around the DG name and serial number.