topic Re: Policy audit comment in cli in General Topics

Policy audit comment in cli

batd2 — Thu, 09 Dec 2021 17:36:06 GMT

Do you know how can we configure and view Panorama security policy audit comments in the cli or another way for bulk applying comments to policies.

I will modify policies in bulk using the cli set commands, but also want to add audit comment to all the policies with the change description, but I can't find the cli option for it.

Re: Policy audit comment in cli

BPry — Thu, 09 Dec 2021 21:50:46 GMT

@batd2,

There's not a great way to do this, primarily because the audit-comment itself isn't actually in the entry itself but instead "associated" with the UUID of the rule. You can use the set audit-comment xpath <xpath> comment <comment> command to create an audit-comment in the CLI or type=op&cmd=<set><audit-comment></audit-comment></set> in the API to configure this outside of the GUI.

Re: Policy audit comment in cli

batd2 — Fri, 10 Dec 2021 09:40:45 GMT

@BPry This is frustrating and kind of defeats some of purpose of the audit comments. I will probably submit a feature request about it

Re: Policy audit comment in cli

Marvin75 — Sat, 11 Dec 2021 07:19:15 GMT

View the audit comment, configuration logs, and rule change history for a selected policy rule.

garageband