topic Re: Remove member from a group via "add host" comment in API / CLI Discussion

Remove member from a group via "add host" comment

vavava — Thu, 29 Sep 2022 09:02:07 GMT

Hi all,

I'm testing a csv files to modify multiple host by "add host" comments.
ex : mgmt_cli add host -b test.scv

I agree that I need to create the group first.

the csv file can be run.
but If I want to modify a host let it remove from a group.

Which "character" I need to fill in group column ?

It looks like only can run A group move to B group.

Any suggestion ?

put "Double quotes" in the comments column that can remove the comments contents.

Re: Remove member from a group via "add host" comment

_Val_ — Thu, 29 Sep 2022 10:35:08 GMT

You cannot remove an object from the group this way. You can probably remove objects from a group by using set group command.

Re: Remove member from a group via "add host" comment

Tal_Paz-Fridman — Thu, 29 Sep 2022 13:15:44 GMT

You can use the set group command or set host commands

https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/set-group~v1.8%20

https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/set-host~v1.8%20

More section

Re: Remove member from a group via "add host" comment

PhoneBoy — Thu, 29 Sep 2022 15:04:10 GMT

If you're importing the second CSV with the cli command mgmt_cli add host -b test.scv, that's not going to work as it is not possible to change an object's group by using the "add-host" API endpoint.
You would need a differently constructed CSV for this purpose as well as a different command (e.g. mgmt_cli set host -b test.csv).

Re: Remove member from a group via "add host" comment

vavava — Fri, 30 Sep 2022 00:20:23 GMT

that right, it works.

Re: Remove member from a group via "add host" comment

vavava — Fri, 30 Sep 2022 01:27:25 GMT

I just test it again by demo mode (R81.10)
It works for "change group" via add-host comment by a csv file.
I think that is why I want to remove a members(host) from a group (Does not belong anyone) through add-host comments with a csv file.

the Audit log show as below

Re: Remove member from a group via "add host" comment

PhoneBoy — Sun, 02 Oct 2022 17:22:04 GMT

That seems like unexpected behavior (changing a group membership via add host).
@Omer_Kleinstern ?

Re: Remove member from a group via "add host" comment

Omer_Kleinstern — Sun, 02 Oct 2022 19:23:02 GMT

The field "set-if-exists" is used which makes it a set-host command and not add-host.

Re: Remove member from a group via "add host" comment

vavava — Wed, 05 Oct 2022 08:40:39 GMT

I'll try it on CheckMates-Labs later.🙂

Re: Remove member from a group via "add host" comment

vavava — Thu, 06 Oct 2022 07:54:37 GMT

I launch a Lab to testing again, the testing result show as before.

the comment "add host" with a csv file could move object from groupA to groupB

[A&B gruop need exist first]