topic Re: Anyway I can show all the rules for a section? in API / CLI Discussion

Anyway I can show all the rules for a section?

Gongya_Yu — Wed, 04 Oct 2023 17:24:15 GMT

Is there anyway I can show all the rules under a specific section ?

thanks !!

Re: Anyway I can show all the rules for a section?

the_rock — Wed, 04 Oct 2023 23:52:40 GMT

I assume you mean via mgmt_cli/api method?

Andy

Re: Anyway I can show all the rules for a section?

Gongya_Yu — Thu, 05 Oct 2023 01:08:38 GMT

Yes. I showed rule-based to get all the sections based on the suggestion I got from the community. Now I moved to display all the rules in a specific section. I am wondering whether I can specify the section to search the rule base. Now I get the From and To for a section via show rule-based. then use them as offset and limit. It works. but I am wondering whether I can save the first step to get the From and To for a section.

thanks !!

Re: Anyway I can show all the rules for a section?

the_rock — Thu, 05 Oct 2023 01:14:12 GMT

Not sure until I can test it in the lab tomorrow. Whats the command you did? If you can give an example here, I can try it myself in R81.20 lab

Andy

Re: Anyway I can show all the rules for a section?

Gongya_Yu — Thu, 05 Oct 2023 20:17:47 GMT

First I use the following to get the rule range
show access-rulebase name ' security_package' limit 1200 | grep -A 3 'section'

Then I use the following to get the rules

show access-rulebase name 'security_package' limit " + str(limit) + " offset " + str(offset)

to get the range of rules.

Wondering whether I can combine these 2 into one.

thanks !!

Re: Anyway I can show all the rules for a section?

the_rock — Fri, 06 Oct 2023 00:22:32 GMT

Sorry, was busy today, had to do bunch of Fortigate stuff, but will try tomorrow, promise.

Cheers,

Andy

Re: Anyway I can show all the rules for a section?

Gongya_Yu — Fri, 06 Oct 2023 01:22:06 GMT

thanks !!

Re: Anyway I can show all the rules for a section?

the_rock — Fri, 06 Oct 2023 01:56:33 GMT

For you, no charge....EXCEPT iphone charge ; - )

Re: Anyway I can show all the rules for a section?

the_rock — Fri, 06 Oct 2023 16:17:33 GMT

Sorry for the delay, had another CP major ospf issue...NOT my favorite subject lol

Anyway, I ran the commands you gave, but so far, I cant logically see a way of combining them, but will keep trying.

Andy

Re: Anyway I can show all the rules for a section?

Gongya_Yu — Fri, 06 Oct 2023 16:24:42 GMT

thanks so much !!

Re: Anyway I can show all the rules for a section?

PhoneBoy — Fri, 06 Oct 2023 16:34:29 GMT

Note that using a limit of greater than 500 with show access-rulebase will produce inconsistent results (namely, all the requested results may not be returned).
For this many rules, you will need to use multiple API calls with limit/offset to page through the results.
Bottom line: this operation cannot be done in a single operation and will probably have to be turned into a script.