Commit-All to Specific Device Using API in Powershell

[OwenFuller]

I am using Powershell to make API requests to Panorama which cause various commands to be executed on specific NGFWs. I would like to do a commit-all to a specific firewall, not the entire DG/template stack. The documentation Commit-All (paloaltonetworks.com) lists the following command:

curl -X GET "https://<panorama>/api/?key=apikey&type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry name="<device-group-name>"><devices><entry name="<serial_number>"></devices><entry/></device-group></shared-policy></commit-all>"

However, when I try this (using Invoke-RestMethod in Powershell as well as just trying in my web browser), I get an error saying "Request is not a valid XML." 

Can anyone help me out w/ the syntax?

[TomYoung]

Hi @OwenFuller ,

You can verify the XMP path by logging into the XML API Browser of Panorama at x.x.x.x/api.  Then drill down into the menu tree (e.g., Commit > all > shared-policy etc.) and you will see the XML API URL on the bottom of the web page.

Thanks,

Tom

[OwenFuller]

Thanks for the suggestion. Unfortunately, the guidance at /api doesn't get that granular for commit-all.

It turns out that the answer was to add a </entry> tag after the serial number entry as shown:

<entry name="<serial_number>"></entry>

 Then, to get it to run properly in Powershell, add backticks to escape quotation marks around the DG name and serial number.