topic Where used query by IP address in API / CLI Discussion

Where used query by IP address

J_Saun — Tue, 16 Apr 2019 12:15:40 GMT

Is there a way in R80 to query where an object is used by IP ADDRESS rather than by name?

Additionally, I'd like to be able to script it so that you are promoted for the IP and then the query runs and returns the results.

Re: Where used query by IP address

Joshua_Hatter — Tue, 16 Apr 2019 12:43:50 GMT

You can probably use show-objects first with ip-only and filter for the ip you want. Then send the returned objects to where-used.

Re: Where used query by IP address

J_Saun — Wed, 17 Apr 2019 15:34:49 GMT

Thanks. I was able to get what I wanted using the command line (mgmt_cli) and using Postman but when I try to use it with ansible it errors out after login.

Here is my code:

- name: "show objects"
check_point_mgmt:
command: show-objects
parameters:
"limit" : 50
"offset" : 0
"type" : "object"
"filter" : "1.2.3.6"
"ip-only" : true
session-data: "{{ login_response }}"

Re: Where used query by IP address

J_Saun — Wed, 24 Apr 2019 18:03:36 GMT

I was able to get the script to work. I was missing quotes around the word TRUE:

- name: "show objects"
check_point_mgmt:
command: show-objects
parameters:
"limit" : 50
"offset" : 0
"type" : "object"
"filter" : "1.2.3.6"
"ip-only" : "true"
session-data: "{{ login_response }}"

My next challenge is to have the output from the above command displayed without using -vvv. I tried using REGISTER but it errors out:

- name: "show objects"
check_point_mgmt:
command: show-objects
parameters:
"limit" : 50
"offset" : 0
"type" : "object"
"filter" : "1.2.3.6"
"ip-only" : "true"
session-data: "{{ login_response }}"

- debug: var=shell_result.stdout_lines

ERROR

TASK [show objects] *************************************************************************************************************************************************************************************************************************
fatal: [127.0.0.1]: FAILED! => {"changed": false, "msg": "Unsupported parameters for (check_point_mgmt) module: register Supported parameters include: command,fingerprint,parameters,session-data"}

Any help would be appreciated.

Re: Where used query by IP address

J_Saun — Wed, 24 Apr 2019 20:02:25 GMT

Figured it out. Had to remove .stdout_lines form debug:

(login commands removed)

- name: "show objects"
check_point_mgmt:
command: show-objects
parameters:
filter : "1.2.3.6"
ip-only : "true"
session-data: "{{ login_response }}"
register: shell_result

- debug: var=shell_result

Note that Ansible is picky about columns. The above script needs to be formatted correctly (proper alignment and indentations).

Re: Where used query by IP address

Luis_Miguel_Mig — Tue, 24 Aug 2021 10:54:10 GMT

I am new with checkpoint ansible.
I was wondering if it is possible to search object by ip with the new collection?

https://galaxy.ansible.com/check_point/mgmt

Re: Where used query by IP address

Luis_Miguel_Mig — Tue, 24 Aug 2021 11:18:51 GMT

oh I see

- name: Get object facts
checkpoint_object_facts:
object_filter: 192.168.30.30
ip_only: yes