Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Fredrik_Holmber
Participant
Jump to solution

R80 automation - VS logging settings through CLI/API

Hi,

As part of an R80 automation process creating VS-es using the API/CLI, we would like to set Logging parameters like log rotation at midnight + where to send logs (to mgmt or clm) etc.

Does anyone of you know where and how these parameters are set internally on R80? Unable to find any documentation covering these steps.

Would be very grateful for any pointers! 🙂

Example of a GUI setting we would like to automate through API/CLI:

Edit VS to access this window

Thanks!

Fredrik

1 Solution

Accepted Solutions
Fredrik_Holmber
Participant

Never take no for an answer! 😉

Your commands and mileage may vary, but this is in essence what you need to execute with dbedit using the run-script API call:

addelement network_objects VS_NAME log_servers:backup_log_servers network_objects:MGMT_SRV
addelement network_objects VS_NAME log_servers:send_logs_to network_objects:LOG_SRV
addelement network_objects VS_NAME log_servers:send_alerts_to network_objects:LOG_SRV
modify network_objects VS_NAME log_policy:log_switch_schedule times:Midnight
modify network_objects VS_NAME log_policy:scheduled_switch true

Log settings, fully automated 🙂

Have a nice weekend!

 - Fredrik

View solution in original post

10 Replies
_Val_
Admin
Admin

As far as I know, you cannot use R80.X MGMT API to manage VSX at all. You need VSX Provisioning Tool 

However, it is a simple scripting tool and does not have a setting you are looking for, due to my knowledge.

There is a slight chance I might be wrong, so I let Tomer Sole‌ to correct me, if anything.

0 Kudos
Kaspars_Zibarts
Employee Employee
Employee

From memory only simple gateways are supported. No cluster no vsx..

0 Kudos
_Val_
Admin
Admin

He seeks ANY CLI or API. Not only MGMT API, where indeed you cannot manipulate cluster and/or VSX objects 

0 Kudos
Fredrik_Holmber
Participant

Thanks for the input!

Valeri Loukine‌ and Kaspars Zibarts yes currently automating the VS creation using the VSX Provisioning Tool, since it's not supported through the API as you correctly stated (feature request!).

I simply want to modify the logging parameters either through the CLI or API. Automating through the GUI is not an option.. 😉

Is there a hidden Checkpoint CLI command to do this, or do I need to edit a config file or a postgres/sqlite DB field somewhere?

Here is the other logging parameter I need to modify:

setting log destinations

0 Kudos
_Val_
Admin
Admin

Sorry, no CLI command for this yet, hidden or otherwise. And please please do not touch DB directly, especially for VSX

0 Kudos
Fredrik_Holmber
Participant

Come on, there has to be a way, hack or not 🙂

Just like how API access is controlled through "/web/conf/extra/httpd2-webapi.conf". You enable access by modifying that file and restarting httpd using tellpm.

Where are the logging configuration settings for VS-es stored? In the Postgres DB?

To me it looks like any changes related to VSX, done in SmartConsole, are handled in "parallel" with the normal Session/Publish logic. The task is not listed in the "Recent Tasks" list either.

As soon as I do a change and press OK it executes the "VSX Operation Progress" window, followed by an "Operation Report" showing what could be script output:

What exactly is getting executed during that "VSX Operation"?

 - Fredrik

0 Kudos
PhoneBoy
Admin
Admin

You are correct that VSX objects are handled differently than non-VSX ones.

Unfortunately, we have never exposed an API (either legacy CPMI or a REST one) for handling VSX objects.

The VSX Provisioning Tool (a CLI command) is one way to automate things.

You can call this through the R80.x API using run-script, but it's not a perfect tool, and may be missing functionality.

I presume we will address these deficiencies in later releases.

0 Kudos
_Val_
Admin
Admin

There is a very a solid reason why VSX is not yet part of MGMT API and needs a provisioning tool. Unlike other gateway objects in MGMT DB, VSX is actually a mosaic of so-called vs slots. Each VS slot is a linked object with just one part of VS structure, with references to VS and VSX cluster member. For example, VS interlace and its settings, including IP address.

When VSX cluster is being deployed or manipulated, MGMT runs a background script which collects all vs slots, lists changes and pushes a provisioning script to physical GWs to be executed. 

VSX object manipulations will come on the later stages of MGMT API development.

0 Kudos
Fredrik_Holmber
Participant

Never take no for an answer! 😉

Your commands and mileage may vary, but this is in essence what you need to execute with dbedit using the run-script API call:

addelement network_objects VS_NAME log_servers:backup_log_servers network_objects:MGMT_SRV
addelement network_objects VS_NAME log_servers:send_logs_to network_objects:LOG_SRV
addelement network_objects VS_NAME log_servers:send_alerts_to network_objects:LOG_SRV
modify network_objects VS_NAME log_policy:log_switch_schedule times:Midnight
modify network_objects VS_NAME log_policy:scheduled_switch true

Log settings, fully automated 🙂

Have a nice weekend!

 - Fredrik

PhoneBoy
Admin
Admin

Nicely done!

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events