- - Forward Knowledge Base
Product Updates
FWD.app

Home
Discussions
Community

Community

Connect with others to answer questions, gain new insights, and grow your networking knowledge.

191 Topics

Request for all firewalls, verifying NTP, DNS, and FortiGuard configurations.

Hi Team, Can you help to get all the details verifying NTP/DNS and Fortiguard configuratioins ?

1079

1 month ago

venkat rajRamping Up

asked in NQE

Interface Errors and/or High utilization verification

I am trying to get an NQE scheduled to run every 5 mins. and fetch if an interface has any errors and/or if the interface utilization is high ( >90%).With the below NQE i get an error as below - Any fields with bytes is not recognized..ERROR: Record does not have field: "bytesOut". interfaceUtilization(iface) = 100 * (sum(iface.bytesOut) - sum(iface.bytesIn)) / (sum(iface.bytesOut) + sum(iface.bytesIn));foreach device in network.devicesforeach interface in device.interfaceswhere interface.adminStatus == AdminStatus.UPselect { deviceName: device.name, interfaceName: interface.name, utilization: interfaceUtilization(interface)} Not sure why “bytes” is not recognized by the NQE How to have this scheduled to run every 5 mins ?

221

1 month ago

gbaronSpotter

asked in NQE

How too data from comment fields in a config file via NQE

The below are two lines that we are trying to pull data out of, but it appears utilizing device.file.config from the data model wont return the information because they are comments? Thoughts? !! Last configuration change at 13:58:30 ZULU Fri Oct 25 2024 by personx! NVRAM config last updated at 14:01:13 ZULU Thu Aug 22 2024 by persony!

788

1 month ago

Rohit_809 KumarSpotter

asked in Product Discussions

Custom command format for Foritnet

we are using below format to collect the data from Fortinet firewall for custom command. endconfig globalshow system dnsshow system ntp can anyone check and confirm ,these will not impact anything ,if i remove config gloabl , than command will not run.

282

1 month ago

Rohit_809 KumarSpotter

asked in NQE

Not able to see outut by NQE

Team, i am using below query to get the virtual server name and dst ip from below query , but somehow i am getting 0 result , can anyone please help . -=-------------------- pattern01 = ```Ltm::Virtual Server: {VirtualServer: string} | Availability : {Availability: string} | State : {State: string} | IP Address : {Destination: ipv4Address} | Reason : {Reason: string}```; foreach device in network.deviceswhere device.platform.vendor == Vendor.F5where device.snapshotInfo.result == DeviceSnapshotResult.completedforeach command in device.outputs.commandswhere command.commandType == CommandType.F5_VIRTUAL_SERVER_STATElet text = command.responselet text = replaceMatches(text, "\n", "\n ")let text = replaceMatches(text, " Ltm::Virtual Server: ", "Ltm::VirtualServer: ")let parsedCommand = parseConfigBlocks(OS.F5, text)foreach match in blockMatches(parsedCommand, pattern01)select { device: device.name, VirtualServer: match.

684

1 month ago

gbaronSpotter

asked in Product Discussions

Collecting custom command "show configuratation" within a a Cisco FPR running on FXOS

For reference - we recently were able to get Cisco Firepower ASA operating as FTD and FPRs on IOS FXOS, for the first time. With that…. Since none of the default commands produce any data in the state files, we are trying to use custom commands. Right now, when performing a show run, it comes back with 25 lines of configs, but then stops at --More--, which is when a user via cli would would push a button. We have lots of other devices running custom commands that do not do this, so why is it happening with FXOS and how can we work around it? Also, the FTD devices reporting all state files properly, its just the FPRs that are having issues.

481

1 month ago

DawnForwardNetworksEmployee

published in Product Discussions

We Value Your Feedback! Share Your Experience and Receive a $25 Gift Card

As a valued customer, your insights play a crucial role in helping us continually enhance the Forward platform. We would appreciate it if you could take a few minutes to share your experience by leaving a review on Gartner Peer Insights™.Your feedback is completely anonymous, and the review process takes only about 10 minutes. As a thank you, the first 50 reviewers with an approved review will receive a $25 USD gift card from Gartner. The Gartner Peer Insights team will send your gift card once your review is published.To be eligible for this promotion, please submit your review by October 31, 2024, at 11:59 PM EST.Thank you for being an integral part of the Forward Networks community and for providing a review. Review us on Gartner

200

1 month ago

ChristopherEmployee

posted in NQE

Combining NQE queries into a single check

Suppose you are using NQE queries to validate that your networking devices follow certain configuration benchmarks. You have an individual query for each benchmark, but you would also like a summary query that shows how each device in the network performs against every check. Here is how you can combine them.Below are two separate NQE queries that validate that the password policies on Cisco ASA devices require a minimum number of numbers and a minimum number of special characters, respectively.In each query, we define a function using the export command that takes in a Device as a parameter. export minNumber(device: Device) Then we call that function later in the same query with minNumber(device). This allows the query to be run on its own or part of another query.We save each file as min-numeric and min-special.pattern = ```password-policy minimum-numeric {minNum:number}```;checkPattern(config) = (max(blockMatches(config, pattern)))?.data?.minNum >= 1;export minNumber(device: Devi

430

1 month ago

Rohit_809 KumarSpotter

asked in NQE

how can i get the F5 POOL Member name ip and state and availability

how can i get the F5 POOL Member name ip and state and availability ?

10113

1 month ago

gbaronSpotter

asked in Product Discussions

how to find postgress version

What command can be ran from the CLI to find the postgres version?

404

1 month ago

auueckerRamping Up

posted in NQE

Sample NQE for Golden Config Compliance and Remediation

I recently have done alot of work on building Golden Config and using NQE queries to find Actual Config on devices and compare to Golden Config and then building the remediation config so actual config will match Golden Config. I did this so Operations engineers can utilize the remediation config to implement on device either manually or through an Ansible playbook that utilizes the NQE Query and then build a workspace on devices being worked on to verify that Golden Config was implemented correctly on device(s). Below is a sample Query for a small section of config to ensure NTP configuration is correct on a Juniper device: goldenConfig_ntp_list = ["set system ntp server 10.10.10.10", "set system time-zone UTC" ];foreach device in network.deviceswhere device.platform.os == OS.JUNOSlet outputs = device.outputsforeach command in outputs.commands where command.commandText == "show configuration | display set" let text = parseConfigBlocks(OS.JUNOS, command.response)let configList =

402

1 month ago

Rohit_809 KumarSpotter

asked in NQE

F5 Partition NQE not fullfil requirement

i am using below query to get the F5 Partition details.======================== foreach device in network.deviceswhere device.platform.vendor == Vendor.F5let outputs = device.outputsforeach c in outputs.commandswhere c.commandType == CommandType.PARTITION_CONFIGselect { Device: device.name, Location: device.locationName, "Partition Name": c.response}===================================== but the output is not looks good , i am also getting the Partition description in Output , i just need only Partition name only , Please help

211

1 month ago

dakotaglorySpotter

posted in NQE

Can commas be removed from number?

extractJson obtains a signatureId value that is a 9 digit Number. When viewing the results in the FN Results window the number appears with commas every three digits. *When exporting the results to Excel the command is not included in the output.

281

1 month ago

TimFEmployee

posted in NQE

Sample NQE query of devices for validation or import to a CMDB

For any users that may be looking to leverage a query to gather information on devices to compare with an existing CMDB inventory, or looking to import data into their existing CMDB to update inventory. Please checkout this NQE: /** * @intent Basic information about Network Devices for CMDB import/compare */formatStatus(deviceSnapshotResult) = when deviceSnapshotResult is collectionFailed(collectionError) -> "Collecting - " + replace(toString(collectionError), "DeviceCollectionError.", ""); completed -> "Completed"; processingFailed(processingError) -> "Processing - " + replace(toString(processingError), "DeviceProcessingError.", "");foreach device in network.deviceslet platform = device.platformlet snapshotInfo = device.snapshotInfoforeach component in platform.componentsselect { Name: device.name, Location: device.locationName, Tags: device.tagNames, Vendor: platform.vendor, Model: platform.model, "Part Serial Number": component.serialNumb

280

1 month ago

AndyLSpotter

asked in NQE

NQE use of limit and offset in API

I have several questions around the NQE api endpoint for running a queries. This endpoint has parameters for limit and offset for the number of records to skip and how many records to request.(example from the documentation){ "query": "foreach d in network.devices select { Name: d.name }", "queryId": "FQ_ac651cb2901b067fe7dbfb511613ab44776d8029", "commitId": "84f84b0c0a0a1805ddff0ca5451c2c55c58605e5", "queryOptions": { "offset": 20, "limit": 100, "sortBy": { "columnName": "Name", "order": "ASC" }, "columnFilters": [ { "columnName": "Name", "value": "MyDeviceName" } ] }, "parameters": { "mtuThreshold": 123, "ntpServers": [ "10.22.2.3", "192.33.4.1" ] }} I have a few questions, and would appreciate any guidance the community can providehow do i know the total number of records that is available ? do i just ask for the next number of records and if none are returned then i have the full set ? if i run the api fo

512

1 month ago

AricaFNEmployee

published in NQE

Using the WHEN statement for clean, efficient NQEs

When I first started working with Network Query Engine (NQE), I didn’t have a traditional software engineering background and was learning Python and NQE at the same time. I needed to create a custom solution for handling certificate expiration dates across different network devices. The Python part of my brain was hoping to find a traditional for loop capability, and was a bit lost when that didn’t exist. As you may know, you can solve any given problem 10 different ways with NQE. I wanted to write a solution that would be clean, readable, easy to maintain, and share with others without having to provide too much explanation .That’s where the WHEN statement came into play.What is a WHEN Statement?Within the NQE Data Model, there are some data types that have a fixed list of options.The WHEN statement in NQE allows you to evaluate different conditions based on those options. WHEN is like switch or case statements in other programming languages, but it’s more tailored to pattern matchin

660

1 month ago

GTurnerEmployee

posted in NQE

Unlocking New Potential: Fixed-Length Encoding and NQE List Operations

Introduction Hello Community! I wanted to share something I’ve been working on that may be helpful to you. It's a query designed to manipulate list arrays by transforming list elements into fixed-length strings, which then lets us easily join, split, or pop elements. NQE built-in functions provide list iteration and for the most part, this satisfies data model iteration for our queries. The approach presented here extends NQE list operation abilities to manipulate lists or extract specific values when required.To accomplish this we can apply a well known process called fixed-length string encoding which involves standardizing the length of each item in a list. By transforming variable-length strings into uniform sizes, we can “index” each item making if possible to perform operations like joining, splitting, and extracting elements. It opens up new possibilities for customizing functions beyond the basics of list iteration and hopefully, it will serve as a helpful tool when you nee

[Resolved]Hi team,when I am trying to use one NQE query for public IPs from Forward Network NQE Library to use it further more on my query, I am getting error while using this. Its showing me module error.

331

2 months ago

GaryBEmployee

posted in Koan Challenges

Play our NQE Koan Challenge - Dog Year Decoder

Hello NQE Enthusiasts, Several Months ago we posted a challenge to use NQE to solve the FizzBuzz challenge . We had so much fun we thought we would make it a reoccurring exercise to demonstrate the power of NQE and and have some more fun with it. You might be asking “What are koans”?"koans" refer to a series of small coding challenges designed to teach programming concepts, often in a particular language. The term originates from Zen Buddhism, where a "koan" is a paradoxical question or statement used to provoke deep thought and insight.We are looking forward to see how everyone solves these challenges so tune in and give it a try, there are no wrong answers :).ChallengeYour task is to calculate the age of a list of people not in human years but in “dog years”. Assuming that one human year is equivalent to seven dog years. Calculate for the following input.Input people = [ { Name: "Tom", Age: 25 }, { Name: "Jerry", Age: 30 }, { Name: "Spike", Age: 15 } ];Expected Output: [ {

1064

2 months ago

DannyRRamping Up

asked in Product Discussions

How do I add a device from the parent network to an existing workspace network?

I was helping some folks in getting familiar with Forward Networks, we were having trouble in adding in new devices (that already exist in the parent network) in to the already created workspace. The existing options to add devices in the workspace looks to only include ways to create new connections to those devices. But I did not see any way for me to pull in existing devices from the parent network, after the workspace was already created. Does anyone have any insight into this?

523

2 months ago

GaryBEmployee

posted in NQE

Evaluating ACL rules from configuration to find last entry

I was asked by a customer to write an NQE check that would trigger a violation if there was not an explicit deny rule at the end of an ACL list. This query breaks down the acl list by acl name leveraging the group-by qualifier. We are also leveraging the `maxBy` function to find the last entry by leveraging the lineNumber property. // /**// * @intent Find acls by name, count and last entry// * @description test if there is an explicity deny rule at end of acl list// */acl_pattern_1 = `access-list {aclName:string} {!"remark"} {action:string} {rest:(string*)}`;maxLine(l) = l.line.lineNumber;foreach device in network.deviceswhere device.platform.vendor == Vendor.CISCOlet acls = patternMatches(device.files.config, acl_pattern_1)let acl_groups = (foreach acl in acls group acl as group_acls_by_name by { deviceName: device.name, aclName: acl.data.aclName } as v select { device

1092

2 months ago

Rohit_809 KumarSpotter

asked in NQE

how can i get F5 Vip ip and Pool address details by NQE

Hi Team , How can i get F5 VIP Ip and Pool address details by NQE. ThanksRohit

1227

2 months ago

deronjohnsonEmployee

published in NQE

Renumber Lines in NQE Output

OverviewThis solution for renumbering line number defaults in NQEs addresses the issue of zero-based indexing by adding one to the line number output, aligning it with user expectations and conventional numbering in configuration files. This adjustment enhances usability and accuracy in network management by ensuring that outputs from NQEs are more intuitive and consistent with other data sources. Additionally, the logic can be applied to child line numbers, further improving the flexibility of the solution. Benefits Improved Usability: The adjustment aligns line numbers with user expectations, making outputs more intuitive and reducing confusion during configuration management and troubleshooting. Enhanced Accuracy: By providing one-indexed line numbers, the solution minimizes errors that could arise from mismatches between displayed and expected line numbers in configurations. Flexible Application: The logic used for renumbering can be extended to child line numbers, allowing for

210

2 months ago

pjptsujitRamping Up

asked in NQE

Getting Pool and Pool members from device.outputs.commands

Fortinet SNMP Configurations

Hi Team,Can you please help me with a NQE Query to get SNMP configured IPs on Fortinet Devices.

683

2 months ago

Page 2 / 8

Vladi Bhas earned the badge Community Champ Award
dakotagloryhas earned the badge Community Champ Award
CarlBhas earned the badge NQE Contributor
gbaronhas earned the badge NQE Contributor
Rohit_809 Kumarhas earned the badge Community Contributor

Show all badges

Sign up

Already have an account? Login

Select a login option:

Welcome to the Forward Networks Community

Select a login option:

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.