Is there a limit to the amount of results that will be returned when a where-used API (v1.5) call is made? I've got a scenario where when I call where-used for a particular object and set indirect to true, Check Point only returns a subset of what I'm expecting. Doing a subsequent where-used call on the specific indirect group name (instead of the host), will return the correct number of results. From what I can tell, this seems to be a limitation for indirect usage only.
If there is a limit, is there a way to increase that number? I tried adding the limit parameter in my data field like some of the other API calls will take, but Check Point returns an unrecognized parameter error.
For example:
When doing a where used in SmartConsole and selecting the indirect box, I'll get back a group and 50+ indirect rules. When doing a where-used via an API call on that same object, I'll only get 22 indirect results back.
curl -X POST "https://<management_server>/web_api/where-used" -H "Content-Type: application/json" -H "X-chkp-sid: <sid>" -d "{\"name\" : \"<object_name>\", \"indirect\" :\"true\"}"
{
"used-directly" : {
"total" : 1,
"objects" : [ {
"uid" : "z3efe4b-597d-4cc0-b78a-49aaee6af055",
"name" : "grp_name_1",
"type" : "group",
"domain" : {
"uid" : "c3a7c90c-af41-e949-9c2d-wwcaf8a46dcc3",
"name" : "Domain 1",
"domain-type" : "domain"
}
} ],
"threat-prevention-rules" : [ ],
"nat-rules" : [ ],
"access-control-rules" : [ ]
},
"used-indirectly" : {
"total" : 22,
"objects" : [ {
"uid" : "zw366a6d-900c-45e2-69b4-266e4e22i85c",
"name" : "grp_name_2",
"type" : "group",
"domain" : {
"uid" : "c3a7c90c-af41-e949-9c2d-wwcaf8a46dcc3",
"name" : "Domain 1",
"domain-type" : "domain"
},
........
}