Get Push To Device summary via API

[abedJawhar]

Hi,

I am trying to automate the push to device proccess through Panorama, I know that the xml API call for tat is commit all, but I was trying to find an API call that would shouw the device groups and templates that will be pushed (trying to get the values that appear in the dialog labeled "Push To Device" when you press on push to device in the GUI).

When I inspect the network calls in the browser, I get this request:

{"action":"PanDirect","method":"run","data":["477deaaf37548a06bfdf2637a05a92b2","ConfigChangeDirect.getInitialPushScope",["no"]],"type":"rpc","tid":85}

And the JSON response body is basically what I need, however when I use the debug page on Panorama, it does not show me this request or its response.

I know we can get the commit change summary from the xml API but I was hoping there would be a similar call for the push summary

Any one tried to do this before and succeeded? Is it all possible?

We're running Panorama 9.1!

Panorama 

[JimmyHolland]

Hi @abedJawhar, what is the goal, because I don't quite understand, sorry. You mentioned the "values from the Push to Devices dialog box", so do you mean you want to make an API call that tells you: which Device Groups have changes committed in Panorama which have not yet been pushed to the NGFWs?

[abedJawhar]

Yes that is exactly correct.. Not just device groups, but also templates and templates stacks that have been committed but not yet pushed to the firewalls!

[JimmyHolland · Accepted solution]

I think I would do this by looking at the status, rather than try to mimic the commit dialog box functionality.

For example, use https://{{host}}/api/?key={{key}}&type=op&cmd=<show><devicegroups/></show> to check 

<shared-policy-status> per device, looking for Out of Sync.

Similarly, use either https://{{host}}/api/?key={{key}}&type=op&cmd=<show><template-stack/></show> or https://{{host}}/api/?key={{key}}&type=op&cmd=<show><templates/></show> per device, and look for <template-status> value of Out of Sync.

That should allow you to build a list of devices which are out of sync, and therefore require their DG or Template/Stack to be pushed. Hope that helps?

[abedJawhar]

Thanks for the reply @JimmyHolland ! That works!