topic Re: Get all network objects from a specific group with api in API / CLI Discussion

Get all network objects from a specific group with api

MichaelGur — Tue, 12 Apr 2022 13:50:33 GMT

We tried this code

mgmt_cli -r true show-group name 'group name' --format json | jq '.members[] | [.name, ."ipv4-address"] | @scv' -r

we have used this command to get all network object from a specific group (objects names and IP addresses) but we have encountered a problem.

Objects defined as networks (with a subnet mask of 255.255.255.0 or higher) do not have IP addresses assigned to them

Re: Get all network objects from a specific group with api

PhoneBoy — Thu, 14 Apr 2022 22:07:49 GMT

Yeah, objects of type network do not have an element called ipv4-address.
Haven't tried this, but maybe this will work:

mgmt_cli -r true show-group name 'group name' --format json | jq '.members[] | [.name, ."ipv4-address", .subnet4, ."mask-length4" ] | @scv' -r

For host objects, you'll see the IPv4 address.
For networks, you'll get the IPv4 network and mask length.

Re: Get all network objects from a specific group with api

Bob_Zimmerman — Fri, 15 Apr 2022 00:34:43 GMT

Minor typo: @scv should be @csv in the end. It works otherwise:

[Expert@DallasSA]# mgmt_cli -r true show-group name 'RFC 1918 Addresses' --format json | jq '.members[] | [.name, ."ipv4-address", .subnet4, ."mask-length4" ] | @csv' -r "RFC 10/8",,"10.0.0.0",8 "RFC 192.168/16",,"192.168.0.0",16 "RFC 172.16/12",,"172.16.0.0",12

Note that this only covers hosts and networks. Address ranges have another set of properties, DNS domains work solely based on the name of the object, and wildcards have yet another set of properties. Groups can also contain groups, which gets really complicated to handle.

As long as you know roughly the contents of the group ahead of time, this is fine.