topic Re: Delete Unused Objects v2.0 in Scripts

Delete Unused Objects v2.0

Adam_Forester — Wed, 27 Mar 2024 19:13:39 GMT

One of the first ever pieces I wrote for CheckMates is a script that would delete unused objects. I was very specific to Host/Network/Group back then. Recently I had a reason to update the tool and now have a new version that will digest objects based off of TYPE so you get delete files you can use in batch commands by object type. I have found no limit to object database size since this loops.

I will say something like this is going to be done quickly and easily with AI co-pilot but until then enjoy!

https://github.com/WadesWeaponShed/Delete-Unused-Objects

Re: Delete Unused Objects v2.0

Adam_Forester — Wed, 27 Mar 2024 19:28:26 GMT

I should probably note that the Python version is till a work in progress... I'm not a python expert so that one still needs work. The Shell version works excellently.

Re: Delete Unused Objects v2.0

the_rock — Wed, 27 Mar 2024 22:57:17 GMT

Where can I get the shell version? Would like to try it in the lab.

Best,

Andy

Re: Delete Unused Objects v2.0

the_rock — Wed, 27 Mar 2024 22:58:51 GMT

Nm, disregard, I see its in that link, let me try and will report if it works

Thanks @Adam_Forester

Re: Delete Unused Objects v2.0

the_rock — Wed, 27 Mar 2024 23:07:24 GMT

Not sure if this looks right, but all I get is below. I also tried on another lab mgmt server, same thing

Andy

[Expert@cpazuremgmt:0]# ./delete-unused-objects.sh

What is the IP address or Name of the Domain or SMS you want to check?
20.220.86.199
There are 1 objects
[Expert@cpazuremgmt:0]# ls
delete-unused-objects.sh
[Expert@cpazuremgmt:0]#

Re: Delete Unused Objects v2.0

Adam_Forester — Thu, 28 Mar 2024 01:18:53 GMT

Ya know... It helps if I publish the correct version. 😂

I just updated it and retested in my lab.

You can then take the files and run them as batch;

Example: mgmt_cli -r true delete host --batch host_127.0.0.1_unused_objects.log

Re: Delete Unused Objects v2.0

the_rock — Thu, 28 Mar 2024 01:29:28 GMT

Thats better mate lol

Andy

[Expert@CP-management:0]# ./delete-unused-objects.sh

What is the IP address or Name of the Domain or SMS you want to check?
172.16.10.252
There are 4 objects
[Expert@CP-management:0]# ls
address-range_172.16.10.252_unused_objects.log
delete-unused-objects.sh
group_172.16.10.252_unused_objects.log
host_172.16.10.252_unused_objects.log

Re: Delete Unused Objects v2.0

_Val_ — Thu, 28 Mar 2024 09:12:27 GMT

Great one, Adam! Moved to ToolBox where it belongs. Can you please add a picture to the post?

Re: Delete Unused Objects v2.0

Tomer_Noy — Sun, 31 Mar 2024 08:51:03 GMT

Thank you for sharing the script and it's always nice to see people leveraging our APIs 😀

I wanted to ask though, why you don't perform this action through the SmartConsole UI? (or perhaps the option is not visible enough...).

If you open the Object Explorer (via the top menu or by clicking the three-dots in the right side Objects pane), there is a combobox at the top left that says "All" by default. If you open it, you can select "Unused Objects" instead and it will filter the contents. You also have the left side filters to hierarchically filter by object types.
Once you filtered for what you wanted, you can multi-select all objects and delete them.

Also, another comment that can help you make the script more efficient is to leverage the "delete objects-batch" command that can delete many objects in a single API call and transaction:
https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/delete-objects-batch~v1.9.1%20

Re: Delete Unused Objects v2.0

Adam_Forester — Mon, 01 Apr 2024 14:35:12 GMT

Hey Tomer! Great question... I wrote the original version back in 2016, this was more of I need to update based on time passed and efficiency of my own code practices.

As for the batch delete command it would require me to one line this and my original idea was for the code to be in a format that was reviewable and the executed with the --batch command based on object type.

I appreciate the input! I may add a second part that would output them into a single code line as an optional output

Re: Delete Unused Objects v2.0

DanCannon — Wed, 24 Jul 2024 08:31:13 GMT

easy answer to this.... limited to 500 objects in the gui.... the API will allow you to iterate over them in turn, for example on a single CMA I have over 3300 unused objects. this is in a MDS with 20 domains... using the gui is far to slow compared to leveraging the api.