Policy audit comment in cli

[batd2]

Do you know how can we configure and view Panorama security policy audit comments in the cli or another way for bulk applying comments to policies. 

I will modify policies in bulk using the cli set commands, but also want to add audit comment to all the policies with the change description, but I can't find the cli option for it. 

[BPry]

@batd2,

There's not a great way to do this, primarily because the audit-comment itself isn't actually in the entry itself but instead "associated" with the UUID of the rule. You can use the set audit-comment xpath <xpath> comment <comment> command to create an audit-comment in the CLI or type=op&cmd=<set><audit-comment></audit-comment></set> in the API to configure this outside of the GUI.

[batd2]

@BPry This is frustrating and kind of defeats some of purpose of the audit comments.  I will probably submit a feature request about it

[Marvin75]

• View the audit comment, configuration logs, and rule change history for a selected policy rule.

  garageband