filter on request for pre-rulebase/security/rules

[mugude]

Is it possible to add filter on a request, i want to get pre-rulebase security rules which contains a key word, do this:

type=config&action=get&xpath=/config/devices/entry[\@name='localhost.localdomain']/device-group/entry[\@name='deviceGroupName']/pre-rulebase/security/rules

And in result i only want rules which contain "test" for example

[gfreeman · Accepted solution]

I'm not sure you can do "like" filtering in the request itself, but you can definitely do it programmatically if you just get all the security rules.

Here's how to do this in pandevice:

from pandevice import panorama, policies

pano = panorama.Panorama(host, username, password)
myGroup = panorama.DeviceGroup('deviceGroupName')
prb = policies.PreRulebase()

# Build the object tree.
pano.add(myGroup)
myGroup.add(prb)

# Get the answer.
all_rules = policies.SecurityRule.refreshall(prb)
answer = [x for x in all_rules if 'test' in x.name]