Not appending new address object in address group through REST API

[ShaileshKum]

We have been trying to append a new address object to an address group in the firewall. However, when we use the PUT method in Postman to insert it into the group, it replaces the existing address objects instead of adding the new one. Additionally, using the POST method results in an error.

[TomYoung]

Hi @ShaileshKum ,

You cannot append with the REST API.  You would need to modify your script to read the members of the address group, append your new value, and replace the contents.

REST typically only does CRUD operations.  Here are the supported REST and HTTP methods:

• Create = Post
• Read = Get
• Update = Put
• Delete = Delete
• Rename = Post
• Move (policy only) = Post

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-panorama-api/get-started-with-the-pan-os-rest-a...

Thanks,

Tom

[ShaileshKum]

Hi @TomYoung 

Thanks for your reply! Usually, when we add an object to a group, we need to copy a previous object and paste it when adding a new object.

[ShaileshKum]

Is there any other option? Currently, when we create a new object, we copy all the properties of an old object and paste them into the new one

[TomYoung]

Hi @ShaileshKum ,

It should be possible with the XML API using the set action.  See this post which has an example of appending an application to a security policy rule.  https://live.paloaltonetworks.com/t5/panorama-discussions/add-or-remove-application-in-a-security-ru...

Thanks,

Tom