topic Re: Export rules in the policy with zero hit count R80.30 in API / CLI Discussion

Export rules in the policy with zero hit count R80.30

SEC_UOLCS — Thu, 07 Oct 2021 16:54:23 GMT

Hi, could someone help me ?

i tried all the stuffs in this forum, management API but doesn't work.

i need to export all the rules in the policy with zero hit count.

Thank you so much !

Re: Export rules in the policy with zero hit count R80.30

PhoneBoy — Thu, 07 Oct 2021 17:47:57 GMT

What precise things did you try and what were the precise results?
There are two basic answers to this question, in any case:

Upgrade to R81.10 where you can export the hit count information with the rules from SmartConsole (in CSV format)
Use a script like: https://community.checkpoint.com/t5/API-CLI-Discussion/Disable-Delete-Rules-with-a-Zero-Hit-Count-MD...

Re: Export rules in the policy with zero hit count R80.30

the_rock — Thu, 07 Oct 2021 22:44:44 GMT

Phoneboy is correct, as usual! I tested this in R81.10 lab and you get EXACT number of hits...say if it shows 1K, you may see say 1790 number. Also, have a look at post I had back in May of this year, might help

https://community.checkpoint.com/t5/Management/Export-of-rules-with-zero-hits-in-dashboard/m-p/119573

Andy

Re: Export rules in the policy with zero hit count R80.30

SEC_UOLCS — Fri, 15 Oct 2021 18:59:22 GMT

Sorry for the delay,

I updated to the version R.81.10 but didn't work.

export failed and drop my session

Re: Export rules in the policy with zero hit count R80.30

PhoneBoy — Sat, 16 Oct 2021 01:06:39 GMT

Please engage with the TAC on this one.

Re: Export rules in the policy with zero hit count R80.30

Paul_Gademsky — Fri, 03 Jun 2022 17:51:55 GMT

R81.10 works for the Security and Application sections of the policy, but unfortunately does not work for the NAT policy (even though you can see it being displayed in the SmartConsole window). Oversight or a feature for R81.20??