XML API config options - edit ordelete to remove user from config rules ????

Robert-Wilmes — Fri, 16 Oct 2015 17:47:58 GMT

I have a question about the XML API config REST requests.

First, do I need to explicitly request the commit lock in the API before making

calls to edit or delete elements in a request (or is this done automatically by the API ?)

Second, I am trying to delete a user from a rule set. Can I use the edit config to

a blank member (like <member></member>) using XPath ?

Third, if I use the delete action on the config call, do I need to first get the element ?

Thanks for any help on actually using the XPath - I figured out how to position to the

element using [@name='some name ...']. I am looking for a real world example on

how the API works.

Thanks for any help!

Re: XML API config options - edit ordelete to remove user from config rules ????

fcasido — Wed, 21 Oct 2015 18:42:45 GMT

To delete a single member object in a configuration use type=config&action=delete. I don't think you can edit a member to blank.

Then use the object name in the xpath as member[text()=’name’]. For example, to delete a source-user object named 'acme\bob' in a group of source users, use the below xpath:

xpath=/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='<vsysname>']/rulebase/security/rules/entry[@name='<rulename>']/source-user/member[text()='acme\bob']

An example using curl.

curl -k "https://<source_ip>/api/?type=config&action=delete&xpath=/config/devices/entry\[@name='localhost.localdomain'\]/vsys/entry\[@name='<vsys name>'\]/rulebase/security/rules/entry\[@name='<rule name>'\]/source-user/member\[text()='acme\bob'\]&key=<API-KEY>"

If you want to use a scripting language like python, use pan-python. https://github.com/kevinsteves/pan-python

topic XML API config options - edit ordelete to remove user from config rules ???? in General Topics

XML API config options - edit ordelete to remove user from config rules ????

Re: XML API config options - edit ordelete to remove user from config rules ????