Export services and group of services

[bhaizlett123]

Is there a way to export services and groups of services. 

I tried this this script

https://github.com/mybasementcloud/R8x-export-import-api-scripts

which works awesome, but it didn't export services or service groups

Any help would be very much appreciated.

[PhoneBoy]

Yes, the API supports it and those scripts should even support that.
Which script did you call with what arguments and what was the precise output?
Also, what version/JHF is the management?

[VFO]

Hi @PhoneBoy ,

I tried this script as well but I couldn't find the script for Services Group. Based on the script, I only saw these and not quite sure if this System Object are the Services Object.

Export System Objects --SO | --system-objects {default mode}
NO System Objects Export --NSO | --no-system-objects
ONLY System Objects Export --OSO | --only-system-objects
All Objects (*2) --all-objects

Appreciate your reply.

[Tal_Paz-Fridman]

Adding @EricB 

[PhoneBoy]

There are a number of pre-defined service objects defined as part of the initial installation of the product.
These are called "System Objects" because when you look at them in SmartConsole, you'll see they were created by "System" versus a different user.

Whether these scripts actually export service groups is a separate question that @Eric_Beasley would have to answer.
Having said that, the API does support this: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/show-service-group~v1.9%20

[Eric_Beasley · Accepted solution]

Hello,

So the initial question about exporting services and service groups has been resolved for a while in later and the current version of the releases on GitHub:
- Release v00.60.12.000.050 2022-10-27 INTERIM tested in more depth, but does not have certain new R81.20 objects.  Does a complete set of services exports and exports the services group objects as well as generates a services_groups_members export to handle the problem of group member exports.

- Release v00.60.12.100.275 2023-01-12 INTERIM - same services capabilities as v00.60.12.000.050, but not tested on MDSM, though should work there too, and includes additional objects only available in R81.20 and later.

Key thing to understand is that we have changed how the different service objects (there are a variety of types too!) behave on import, so the export to CSV needs multiple files to handle the now required import challenges, since that can't be done in a single file anymore, as R&D have implemented certain checks in the import operation.

Use the --help function with the export_import scripts to see what the CLI parameters are, and there is a TSV that explains the parameters.

All exports to JSON are as complete for the object as is provided by the API, and CSV export is based on what the JSON provides, can be harvested via JQ and other methods.  Some of the work is a work-in-progress, since we've made certain things more complicated, nothing is improved without feedback, and this development is effort on my free-time.

BR

Eric Beasley
Channel Architect, member of Management and Automation VT @ Check Point