How to list and export the objects member from the network group in checkpoint management server

[Rabindra_Khadka]

Hello everyone,

We need to list all the objects members along with the name and IP-Address from the particular network group to the CSV format. The checkpoint management server is in R80.20 version. Is there any way from commandline or others to exports the object members along with the name and ip address from the particular network group in csv format.

Please help if there is any solution.

@phoneboy 

Thanks 

[flipnclick]

Tried this , but ended with error. please suggest.

SMS>
| [.name, ."ipv4-address"] |@csv' -r "groupname" --format json | jq '.members[]
MGMT9000 Failed to execute command. For more details see log file.
SMS>
SMS>
SMS>
SMS> cpstat os

Product Name: SVN Foundation
SVN Foundation Version String: R80.30
SVN Foundation Build Number: 993000019
SVN Foundation Status: OK
OS Name: Gaia
OS Major Version: 3
OS Minor Version: 10
OS Build Number: -
OS SP Major: -
OS SP Minor: -
OS Version Level:
Appliance SN:
Appliance Name: Standard PC (i440FX + PIIX, 1996)
Appliance Manufacturer: Other

[flipnclick]

Thanks this command for me as well. 

[Expert@SMS:0]# mgmt_cli -r true show-group name "s2fs_Group_1" --format json | jq '.members[] | [.name, ."ipv4-address"] |@csv' -r > abc.txt
[Expert@SMS:0]# ls -l
total 4
-rw-rw---- 1 admin root 445 Mar 30 21:56 abc.txt
[Expert@SMS:0]# cat abc.txt
"host_10.10.10.10","10.10.10.10"
"host_10.10.10.11","10.10.10.11"
"host_10.10.10.12","10.10.10.12"
"host_10.10.10.13","10.10.10.13"
"host_10.10.10.14","10.10.10.14"
"host_10.10.10.15","10.10.10.15"
"host_10.10.10.16","10.10.10.16"
"host_10.10.10.17","10.10.10.17"
"host_10.10.10.18","10.10.10.18"

[Kevin_Stanton]

I just ran the above command on a R80.30 management server however I only get the Object name within the group No IP address, Can you help Please

mgmt_cli -r true show-group name "Group_Name" --format json | jq '.members[] | [.name, ."ipv4-address"] |@csv' -r

output

"A_Branch_Data",
"B_Branch_Data",
"C_Branch_Data",

[PhoneBoy]

I suspect the members og A_Branch_Data are not host objects, but rather network objects.
Network objects do not have a field ipv4-address.
You'll need to do something like:

    mgmt_cli -s sid.txt show-group name "$X" --format json | jq '.members[] | [.name, ."ipv4-address",.subnet4,."mask-length4"] |@csv' -r

And be mindful of the over caveats I noted above.

[Kevin_Stanton]

found this one courtesy of Bob_Zimmerman and PhoneBoy

https://community.checkpoint.com/t5/API-CLI-Discussion/Get-all-network-objects-from-a-specific-group...

[Expert@DallasSA]# mgmt_cli -r true show-group name 'RFC 1918 Addresses' --format json | jq '.members[] | [.name, ."ipv4-address", .subnet4, ."mask-length4" ] | @csv' -r
"RFC 10/8",,"10.0.0.0",8
"RFC 192.168/16",,"192.168.0.0",16
"RFC 172.16/12",,"172.16.0.0",12

[Agent_Smith]

This doesn't work with smart1 because we don't have CLI access

How can we export objects from a group to CSV? @PhoneBoy 

[PhoneBoy]

https://community.checkpoint.com/t5/API-CLI-Discussion/Export-Group-objects-to-CSV/m-p/159369/highli...

[cdooer]

Sorry to revive an old thread, but do you have any idea why I would get this error when attempting to use the above command?

[Expert@fwmgr1:0]# mgmt_cli -r true show-group name ”servers” --format json | jq '.members[] | [.name, ."ipv4-address",.subnet4,."mask-length4"] |@csv' -r
jq: error: Cannot iterate over null

Running R81.10, latest JHF.

[Eric_Beasley]

The default details level of show-group does not include the information you want show, you can test this by just running the command without piping to JQ, which will reveal the issue.

Add "details-level full" after the name <group_name> and you should get the desired results.

mgmt_cli -r true -f json show-group name "_your_groupname_here_" details-level full | jq '.members[] | [.name, ."ipv4-address",.subnet4,."mask-length4"] |@csv' -r

[cdooer]

Thx Eric, that command works. Funny thing is when I manually type it in, it gives me the info I need. When I copy and paste the exact line from notepad, it gives me the Cannot iterate over null error...LOL. Wonder if Notepad is putting a character in somewhere that I can't see. 

[frass]

Hi Phoneboy,

How about export all rules not specified. Because we have a lot rules using network group and service group object and we want export that all rules.

[PhoneBoy]

Your question is unclear.
Please create a new thread with your precise requirements and your version/JHF information.

[Mlinko]

Dear PhoneBoy,

I wanted to test your command on our MGMT Server running r81.20 Take 65 but I get the following error:

"jq: error: Cannot iterate over null"

Do you have any Idea what I'm doing wrong?

Thank you!

KR
Rok

[PhoneBoy]

It means the previous command in the pipe string didn't return results the given jq command current parse.
Specifically, it's this part: mgmt_cli -r true show-group name "groupname" --format json
The jq expression will have to be modified according to what data this command returns.

[Mlinko]

Hi,

thanks for the info! It was actualy the -d "Domainname" that was missing in the command, as we are running an MDS Mgmt.

Thank you again for the help!

KR
Rok

[IOB]

after running the cmd ( mgmt_cli -r true show-group name "groupname" --format json | jq '.members[] | [.name, ."ipv4-address"] |@csv' -r )where can we find the file ???

[_Val_]

Try the local folder you are rinning the command from, and also user's home folder

[Eric_Beasley]

The command jq DOES NOT create a CSV file it creates the output in a CSV compliant format, so you need to first create the file with the necessary column headers, then pipe APPEND the output from the mgmt_cli command to that file with the header, which is how you get an actual file.

You should have had a dump of the values to your shell screen, if run without piping the output.

CORRECTED:  Added "details-level full" to ensure all values are available for parsing with JQ

echo "name","ipv4-address" > groupmembers.csv
mgmt_cli -r true -f json show-group name "_your_groupname_here_" details-level full | jq '.members[] | [.name, ."ipv4-address"] |@csv' -r >> groupmembers.csv