PanOS7.1 Panorama API how can I find out if the Device group is locked?

[btorresgil · Accepted solution]

You can get all locks using the operational command API.

For example:

https://<panorama>/api/?key=<your-API-key>&type=op&cmd=<show><commit-locks/></show>

Note:  That API call will retreive the commit locks.  For config locks, change <commit-locks/> to <config-locks/>.

The following text is an example response from that API call perfomed on Panorama 7.1.0.  There are two locks in the example output below.  You can tell by the lines in red that one of these locks is global (shared) and one of these locks is specific to a device-group called "My Device Group".

<response status="success">
    <result>
        <commit-locks>
            <entry name="admin">
                <type>dg</type>
                <name>My Device Group</name>
                <created>2016/05/18 20:17:41</created>
                <last-activity>2016/05/18 20:17:41</last-activity>
                <loggedin>yes</loggedin>
                <comment>
                    <![CDATA[This is a device-group lock]]>
                </comment>
            </entry>
            <entry name="admin">
                <type>shared</type>
                <name>shared</name>
                <created>2016/05/18 20:17:43</created>
                <last-activity>2016/05/18 20:17:43</last-activity>
                <loggedin>yes</loggedin>
                <comment>
                    <![CDATA[This is a global (shared) lock]]>
                </comment>
            </entry>
        </commit-locks>
    </result>
</response>