Skip to main content

Solved

59 Topics
D
DannyRRamping Up
asked in Forward API
API Path Searching with FQDNs

Hello Forward Networks!I have a question regarding if it's possible to add support to resolve FQDNs in the Path Search API? Or would we have to rely on our own DNS servers to make the resolutions first to then add the discovered IP Address to the source or destination. Can it be possible for Forward Networks to model FQDNs as independent objects? Apologies if this seems like a silly ask!Thank you

322
D
R
Spotter
Rohit_809 KumarSpotter
asked in NQE Discussions
How can i get output in single coloum 

How can i get output in single coloum .  team , i am using below query to get the NTP Server data , however is tried all option to get the output in single coloum , but i am not sucess. NQE Query ciscontppattern=```ntp server {server:string}```;ciscontppattern2=```ntp server {vrf:string} {dir:string} {ser:ipv4Address}```;patternf5 = ```sys ntp    servers { server1:string} {server2:string}```;cisco1(device) =foreach command in device.outputs.commands  let response = parseConfigBlocks(device.platform.os, command.response)  foreach match in blockMatches(response, ciscontppattern)  select match.data.server;cisco2(device) =foreach command in device.outputs.commands  let response = parseConfigBlocks(device.platform.os, command.response)  foreach match in blockMatches(response, ciscontppattern2)  select match.data.ser;getServers(device) =foreach command in device.outputs.commands where command.commandText == "list sys ntp"let filtered_response = replace(command.response, "{", "")let filtered_

666
R
Spotter
S
Driver
SteveBamfordDriver
asked in NQE Discussions
Arista WIFI Validate AP Version

Following on from  I thought I would share this NQE if others are using Arista AP’s and want to maintain version numbers across their estate. /** * @intent List all Arista AP's and there software version. * @description List all Arista AP End Points and there software version. */allowedVersion = "18.0.0";foreach endpoint in network.endpointswhere endpoint.profileName == "Arista Wireless AP's"foreach command in endpoint.cliCommandResponseswhere command.command == "show device info"let ParsedResponse = parseConfigBlocks(OS.UNKNOWN,command.response)foreach line in ParsedResponselet modelNo = patternMatch(line.text,`Device Model : {string}`)foreach line in ParsedResponselet software = patternMatch(line.text, `Device Version : {string}`)foreach line in ParsedResponselet serialNo = patternMatch(line.text,`Serial Number : {string}`)where isPresent(modelNo)where isPresent(software)where isPresent(serialNo)select { violation: software != allowedVersion, name: endpoint.name, location

252
S
Driver
R
Spotter
Rohit_809 KumarSpotter
asked in NQE Discussions
Merge multiple NQE Query in single view.

we are using 4 different query to get some information in FWD , is their any way to merge these queries into one and get the output in single file.Query 1 for NTP Fortinet :-  pattern_fmg = ```config system ntp    config ntpserver        edit 1            set server {ntp1:string}```;pattern_servers =  ```config system ntp    config ntpserver        edit 2            set server {ntp2:string}       ```;pattern_servers2 =  ```config system ntp    config ntpserver        edit 3            set server {ntp3:string}```;// Loop through list of devices finding those that are Fortinet// and store outputs of commands in the 'outputs' variable// Loop through list of devices finding those that are Fortinetforeach device in network.devices/* where device.platform.vendor == Vendor.FORTINET */let outputs = device.outputs// Loop through the commands in the outputs var, looking for custom// commands that are from 'show system ntp' and store in a variable called central_mgmtforeach command in outputs.com

802
R
Spotter
R
Spotter
Rohit_809 KumarSpotter
asked in NQE Discussions
How can i get Fortianalyzer details from fortinet firewall ?

Team, i am collecting frtianazlyer data from fortinet firewall via custom command , however i tried below query to get the data . pattern_faz =  ```config log fortianalyzer setting  set status enable    set server {faz:string}    ```;foreach device in network.devices/* where device.platform.vendor == Vendor.FORTINET */  let outputs = device.outputsforeach command in outputs.commands   where command.commandType == CommandType.CUSTOM   where command.commandText == "show  log fortianalyzer setting"  let configurations = parseConfigBlocks(OS.FORTINET, command.response) foreach match in blockMatches(configurations, pattern_faz)/* where !matches(device.name, "*_*") */ select {  deviceName: device.name,  SiteName: device.locationName,  "Primary DNS": match.data.faz,}   but unfortunatelly i m getting zero result. can anyone help on this

351
R
Spotter
R
Spotter
Rohit_809 KumarSpotter
asked in NQE Discussions
How can i get the config register value for cisco devices ?

How can i get the config register value for cisco devices ?

962
R
Spotter
H
HadiRamping Up
asked in NQE Discussions
How to list up all the devices with EOL/S date?

Hi all, I am new to NQE and trying to find out a way to list up all the devices with the EOL/S status.Here is the script which the first phase./*** @intent End-of-life data for operating systems** @description If  EoL data is known for the OS of a device,* then that device shows the respected dates, if not EoS related columns shows null.** Data exists for devices running any of these OSes:* ARISTA_EOS, IOS, IOS_XE, IOS_XR, JUNOS, NXOS, and PAN_OS. */ foreach device in network.deviceslet platform = device.platformlet osSupport = platform.osSupport/* where isPresent(osSupport) */select {  Device: device.name,  Vendor: platform.vendor,  Model: platform.model,  OS: platform.os,  "OS Version": platform.osVersion,  "End of OS maintenance": osSupport?.lastMaintenanceDate,  "End of OS vulnerability": osSupport?.lastVulnerabilityDate,  "End of OS support": osSupport?.lastSupportDate,  URL: osSupport?.announcementUrl,  Location: device.locationName,  Tags: device.tagNames,  "Collection IP": devi

802
H
H
hdrewRamping Up
asked in Integrations
Forward Network application (system) monitoring

can Forward Network application (itself) integrate with Grafana, or Sysdig for monitoring the system health (i.e. cpu, memory, logfile, processes, filesystem) attributes. would like to send to dashboard tier team monitoring

1393
J
Employee
G
Spotter
gbaronSpotter
asked in NQE Discussions
NQE Query for OSPF PEERS

Hello!    We are trying to write a NQE referencing the State File OSPF PEERS, but we cant find anything related to code or the CommandType, or any data really, in the NQE data model.  Can someone please point me in the right direction.

835
S
Employee
R
Spotter
Rohit_809 KumarSpotter
asked in NQE Discussions
NQE Query for Fortinet Firewall vdom exclude from exiting query.

I am using the NQE query to retrieve Fortinet Firewall NTP details. However, I am also receiving details for VDOM (Virtual Context ) or virtual contexts, which I do not want. Could you please assist me in refining the NQE query to exclude these VDOM details?   

472
R
Spotter
V
Spotter
VarunS
asked in NQE Discussions
Syslog Enabled devices list

Hi Team,I need to obtain a list of devices that have syslog enabled as well as those that do not. I have checked the Forward Library and the community but could not find any relevant queries for this purpose. Could you please assist me in generating the list of devices with syslog enabled and those without it? Thank you!

14315
V
Spotter
C
Spotter
CarlBSpotter
asked in Synthetic Nodes
Can a synthetic node be exported or downloaded to be recreated in a different network?

I have created a synthetic node inside a workspace to run down the various connections for a complex multibranch setup with multiple MPLS vpns and Internet VPNs. Is there a way to move or download the synthetic nodes so I can recreate them inside the parent network now that I have confirmed the accuracy inside the workspace? Note that I am trying to move it from a workspace back to the parent network - otherwise I would just recreate the workspace from the parent and include the synthetic.

414
Christopher
Employee
Tyson Henrie
Employee
Tyson HenrieEmployee
asked in NQE Discussions
List with double quoted items in the list

I had to change a lot, but this keeps the intent.  This is from a PANOS firewall.  The problem is that I am trying to find the objects in this list.  However, some objects have double quotes to show there are spaces in the name of the object and some do not.  I’m not sure how to clean this since NQE natively does not use double quotes to designate a single object that happens to contain spaces. sampleInput = """policy { shared; panorama { address-group { THE-GRAPE-Subnets { static [ "Green Grapes Are Good" RedGrapes BlackGrapes "Wine Grapes" PurpleGrapes]; tag GRAPES; description "This is a list of Grapes"; }""";pattern01 = ```policy panorama address-group THE-GRAPE-Subnets static "[ {object: (string*)} ```;foreach x in [1]let config = parseConfigBlocks(OS.PAN_OS, sampleInput)foreach match in blockMatches(config, pattern01)select { objects: match.data, block: match.blocks}Then this is the result from the “objects” column.{object:["Green

1877
Mullers
Employee
C
Spotter
CarlBSpotter
asked in NQE Discussions
blockMatches on multiple patterns with the differentiator being a child line of output

I am trying to get data out of a Cisco DMVPN hub on the spokes via NHRP database.  Specifically the ARIN addresses and if the spoke has a firewall or other NAT. I was modelling off of this NQE question and it works...except for the 2nd pattern is not detecting the child line.The above question had a parent line that was always present if the new child was present and NHRP has the new child only if there is a NAT in the path while the parent line is always present. The line in question is the “(Claimed NBMA address: <IP address>)” line at the bottom of the 2nd example - it is indented 1 space from the line above ‘NBMA address’ which is always present. I tried both the NHRP data in the data model as well as a custom command ‘show ip nhrp’ with identical results.   //NHRP Database output//Command: show ip nhrp//10.100.12.5/32 via 10.100.12.5//   Tunnel1 created 1d18h, expire 01:56:31//   Type: dynamic, Flags: unique registered nhop//   NBMA address: 12.12.31.74//10.100.12.6/32 via 1

885
C
Spotter
C
Spotter
CarlBSpotter
asked in NQE Discussions
How to isolate a single commandType output for parsing?

I am trying to get the output from commandType NHRP_STATE so I can then pull out the tunnel peer IPs with a patternmatch. When the NHRP table was a custom command the command.commandText was able to get this information, now how to do so that NHRP is part of the data model?

673
Tyson Henrie
Employee
P
pjptsujitRamping Up
asked in NQE Discussions
Split the output string value

foreach device in network.devicesselect {  deviceName: device.name}For the above NQE, if I get the device names in the format “aaa_bbb_ccc”, is there a way to split the output based on the string “_” and have three different fields?

1042
Andreas
Employee
V
venkat rajRamping Up
asked in NQE Discussions
Interface Errors and/or High utilization verification

I am trying to get an NQE scheduled to run every 5 mins. and fetch if an interface has any errors and/or if the interface utilization is high ( >90%).With the below NQE i get an error as below - Any fields with bytes is not recognized..ERROR: Record does not have field: "bytesOut". interfaceUtilization(iface) = 100 * (sum(iface.bytesOut) - sum(iface.bytesIn)) / (sum(iface.bytesOut) + sum(iface.bytesIn));foreach device in network.devicesforeach interface in device.interfaceswhere interface.adminStatus == AdminStatus.UPselect { deviceName: device.name, interfaceName: interface.name, utilization: interfaceUtilization(interface)} Not sure why “bytes” is not recognized by the NQE How to have this scheduled to run every 5 mins ?

411
Tyson Henrie
Employee
G
Spotter
gbaronSpotter
asked in NQE Discussions
How too data from comment fields in a config file via NQE

The below are two lines that we are trying to pull data out of, but it appears utilizing device.file.config  from the data model wont return the information because they are comments?  Thoughts?   !! Last configuration change at 13:58:30 ZULU Fri Oct 25 2024 by personx! NVRAM config last updated at 14:01:13 ZULU Thu Aug 22 2024 by persony!

1028
Andreas
Employee
A
Spotter
AndyLSpotter
asked in NQE Discussions
NQE use of limit and offset in API

I have several questions around the NQE api endpoint for running a queries. This endpoint has parameters for limit and offset for the number of records to skip and how many records to request.(example from the documentation){  "query": "foreach d in network.devices select { Name: d.name }",  "queryId": "FQ_ac651cb2901b067fe7dbfb511613ab44776d8029",  "commitId": "84f84b0c0a0a1805ddff0ca5451c2c55c58605e5",  "queryOptions": {    "offset": 20,    "limit": 100,    "sortBy": {      "columnName": "Name",      "order": "ASC"    },    "columnFilters": [      {        "columnName": "Name",        "value": "MyDeviceName"      }    ]  },  "parameters": {    "mtuThreshold": 123,    "ntpServers": [      "10.22.2.3",      "192.33.4.1"    ]  }} I have a few questions, and would appreciate any guidance the community can providehow do i know the total number of records that is available ? do i just ask for the next number of records and if none are returned then i have the full set ? if i run the api fo

652
Andreas
Employee
V
Spotter
VarunS
asked in NQE Discussions
Invalid module path

[Resolved]Hi team,when I am trying to use one NQE query for public IPs from Forward Network NQE Library to use it further more on my query, I am getting error while using this. Its showing me module error. 

361
V
Spotter
R
Spotter
Rohit_809 KumarSpotter
asked in NQE Discussions
how can i get F5 Vip ip and Pool address details by NQE

Hi Team , How can i get F5 VIP Ip and Pool address details by NQE. ThanksRohit

1607
davetee
Community Manager
P
pjptsujitRamping Up
asked in NQE Discussions
Getting Pool and Pool members from device.outputs.commands

Under the command type F5_LTM_POOL_STATE for F5 devices, the pool and pool members are in the following format:---------------------------------------------------------------------------------------Ltm::Pool: XXX ---------------------------------------------------------------------------------------Status Availability : XXX State : XXX ... -------------------------------------------------------------- | Ltm::Pool Member: XXX -------------------------------------------------------------- | Status | Availability : XXX | State : XXX ... -------------------------------------------------------------- | Ltm::Pool Member: XXX -------------------------------------------------------------- | Status

671
G
Employee
D
Spotter
dakotaglorySpotter
asked in NQE Discussions
Custom source appends zeros to microsecond value; extractJson interprets as Float

I have a custom source that is appending zeros to the end of the microseconds which may be the cause of FN seeing it as a Float. Would it be possible in future versions to force a string data type so it might be manipulated or is there any other way I can manage this from the FN side?   Excited to begin using the date and timestamp functions.  Do you think they will become data types that could be used in the extractJson strings eventually? Custom source value:  extractJson code: If i change the value to Number or String the query errors because it sees that value as a Floatselect code:  Result:   

783
davetee
Community Manager
D
Spotter
dakotaglorySpotter
asked in NQE Discussions
Is it possible to extract a value from a subList?

parserecords(ep) =     foreach x in [0]    let recordid = extractJson[{        kind: String, selfLink: String, items:            List<{                subList:List                    List<{                        kind: String, selfLink: String, name: String                }>            }>    }]foreach hs in network.externalSources.httpSourcesforeach ep in hs.endpointswhere ep.name == "endpointname" && ep.statusCode == 200let recordItems = (min(parserecords(ep))).itemsforeach i in recordItemsselect {    SrcName: hs.name,    subListName: i.subList.name}///////////////////////// Oops! The query doesn't work ///////////////Address the following issues:        - Line xx, character xx: Can't access field 'name' from 'i.subList', because that is a List<{kind: String, selfLink: String, name:String}>.

746
D
Spotter
D
Spotter
dakotaglorySpotter
asked in NQE Discussions
Convert MicroSeconds in NQE

A custom source API call returns a date field in microseconds format. Does NQE have a built in function to convert? For example, 1725899407, to Sept. 9, 2024. Currently I don’t need the hours and minutes but in the future it may be necessary. I’ve searched “date” and “microseconds” in the documentation and online without success.

795
D
Spotter
  • Community Contributor
    gbaronhas earned the badge Community Contributor
  • Community Contributor
    Christopherhas earned the badge Community Contributor
  • NQE Collaborator
    Christopherhas earned the badge NQE Collaborator
  • Community Contributor
    Tyson Henriehas earned the badge Community Contributor
  • NQE Expert
    cariddirhas earned the badge NQE Expert
Show all badges
Terms of UseCookie settings