About ksteves

another alternative may be to use 'get' with the xpath below. $ panxapi -t panorama -gxr /config/devices/entry/device-group/entry/devices get: success <devices><entry name="001606000471"/></devices><devices><entry name="0004C101452"><vsys><entry name="vsys2"/></vsys></entry></devices><devices><entry name="0004C101452"><vsys><entry name="vsys3"/></vsys></entry></devices><devices/> ... View more

To delete multiple you can use an XPath with 'or': [text()='foo' or text()='bar'] delete does not use an element argument, only xpath. set is 'merge at XPath node', edit is 'replace at XPath node'. for edit your example will need the member elements in <list></list>. also see this: ... View more

you can use context 'dns-req-section' and \x to start and end hex bytes for length to construct the domain name in the question like the example below, however I'm not aware of how to construct a valid pattern to match case insensitive. the below will match www.hp.com but not www.HP.COM and so on. also, if you could match case insensitive someone could use name/label compression to subvert the pattern match. set application dns-qname-www.hp.com signature www.hp.com and-condition "And Condition 1" or-condition "Or Condition 1" operator pattern-match pattern \x03\xwww\x02\xhp\x03\xcom\x0000010001\x set application dns-qname-www.hp.com signature www.hp.com and-condition "And Condition 1" or-condition "Or Condition 1" operator pattern-match context dns-req-section set application dns-qname-www.hp.com signature www.hp.com scope protocol-data-unit set application dns-qname-www.hp.com signature www.hp.com order-free yes set application dns-qname-www.hp.com signature www.hp.com comment "0001 is type A 0001 is class IN" set application dns-qname-www.hp.com parent-app dns ... View more