topic Re: show config running xpath syntax in General Topics

show config running xpath syntax

PAkeeper — Mon, 15 Feb 2010 11:04:32 GMT

Hello,

I try to figure out the correct sytax for the xpath option of the show config running CLI-command (running PAN-OS 3.0.6).

? says:

+ xpath xpath of the node to retrieve

but every way I tried to describe the node I want gives me a "Invalid syntax".

Re: show config running xpath syntax

nrice — Tue, 16 Feb 2010 01:13:43 GMT

These element nodes that can be used with the show config running xpath command;

admin@PA-500> show config running xpath devices
devices {
localhost.localdomain {
    network {
      interface {
        ethernet {
          ethernet1/1 {
            virtual-wire ;

etc....

admin@PA-500> show config running xpath shared

shared {
signature ;
application ;
application-group ;
service ;
service-group ;
log-settings {
    syslog {
      Al-Syslog {
        server 10.16.0.232;
        port 514;
        facility LOG_USER;

etc....

admin@PA-500> show config running xpath mgt-config

mgt-config {
devices {
    localhost.localdomain {
      ip 127.0.0.1;
      vsys {
        vsys1 { }
             etc...

Re: show config running xpath syntax

abharali — Tue, 16 Feb 2010 01:20:31 GMT

Additional notes:

admin@mgmt-kestrel> show config running xpath "shared/profiles/virus"

virus {

custom-av {

decoder {

ftp {

action block;

}

http {

action block;

}

imap {

action block;

}

pop3 {

action block;

}

smb {

...

To get details of specific profile named 'custom-av'

show config running xpath "shared/profiles/virus/entry[@name='custom-av']"

custom-av {

decoder {

ftp {

action block;

}

http {

action block;

}

imap {

action block;

}

pop3 {

action block;

}

smb {

Re: show config running xpath syntax

PAkeeper — Tue, 16 Feb 2010 07:54:40 GMT

Thanks! Playing around with this, I've learned I can't get every node within the configuration tree, e.g.

show config running xpath shared/log-settings/syslog works fine, but

show config running xpath mgt-config/users/admin does not.

So in the devices section, I can't reach anything below devices/localhost.localdomain, but that would be the interesting part...

Re: show config running xpath syntax

rroger — Tue, 18 Jan 2011 10:47:48 GMT

Can someone give the solution in order to see only the deviceconfig node?

Thks

Remi

Re: show config running xpath syntax

twmarsh — Thu, 05 Apr 2012 19:59:47 GMT

show config running xpath devices/entry[@name="localhost.localdomain"]/deviceconfig