PaloAlto Firewall CLI partial commit by object-xpaths

Showing results for 
Show  only  | Search instead for 
Did you mean: 

PaloAlto Firewall CLI partial commit by object-xpaths

L0 Member


I`m trying to include only single object into commit.

Web interface allows to exclude objects from commit:



On the first glance looks like CLI could provide such option:

USER@Device# commit partial
+ description Enter commit description
+ device-and-network device-and-network
+ policy-and-objects policy-and-objects
+ shared-object shared-object
> admin admin
> object-xpaths object-xpaths
<Enter> Finish input

But I did not found any examples or documentation.

Idea is to command be like:
commit partial object-xpaths [/config/devices/entry[@name='localhost.localdomain']/network/virtual-router/entry[@name='NAME']]



Community Team Member

Hi @indoungwe ,


For the partial commit in the CLI it looks like you can only specify device-and-network, policy-and-objects, shared-object, and admin. 



For example, if you made a change in the Security policy only, you might want to commit just the policy and objects portion of the configuration as follows:


commit partial device-and-network excluded
I see the changes you made look to be all in Device and Network. If we apply the same logic from the example, "commit partial policy-and-objects excluded" will commit all of what you have shown. 
Could you try "commit device-and-network" and then tab to see if it gives you an option for input. Maybe you could specify the single object. 
LIVEcommunity team member
Stay Secure,
Don't forget to Like items if a post is helpful to you!

Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.
  • 1 replies
  • 101 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!