Skip to main content

Home
Search

Solved

57 Topics

Recently active

Most views Most replies

SteveBamfordDriver

asked in NQE Discussions

Arista WIFI Validate AP Version

Following on from I thought I would share this NQE if others are using Arista AP’s and want to maintain version numbers across their estate. /** * @intent List all Arista AP's and there software version. * @description List all Arista AP End Points and there software version. */allowedVersion = "18.0.0";foreach endpoint in network.endpointswhere endpoint.profileName == "Arista Wireless AP's"foreach command in endpoint.cliCommandResponseswhere command.command == "show device info"let ParsedResponse = parseConfigBlocks(OS.UNKNOWN,command.response)foreach line in ParsedResponselet modelNo = patternMatch(line.text,`Device Model : {string}`)foreach line in ParsedResponselet software = patternMatch(line.text, `Device Version : {string}`)foreach line in ParsedResponselet serialNo = patternMatch(line.text,`Serial Number : {string}`)where isPresent(modelNo)where isPresent(software)where isPresent(serialNo)select { violation: software != allowedVersion, name: endpoint.name, location

Rohit_809 KumarSpotter

asked in NQE Discussions

Merge multiple NQE Query in single view.

we are using 4 different query to get some information in FWD , is their any way to merge these queries into one and get the output in single file.Query 1 for NTP Fortinet :- pattern_fmg = ```config system ntp config ntpserver edit 1 set server {ntp1:string}```;pattern_servers = ```config system ntp config ntpserver edit 2 set server {ntp2:string} ```;pattern_servers2 = ```config system ntp config ntpserver edit 3 set server {ntp3:string}```;// Loop through list of devices finding those that are Fortinet// and store outputs of commands in the 'outputs' variable// Loop through list of devices finding those that are Fortinetforeach device in network.devices/* where device.platform.vendor == Vendor.FORTINET */let outputs = device.outputs// Loop through the commands in the outputs var, looking for custom// commands that are from 'show system ntp' and store in a variable called central_mgmtforeach command in outputs.com

Rohit_809 KumarSpotter

asked in NQE Discussions

How can i get Fortianalyzer details from fortinet firewall ?

Team, i am collecting frtianazlyer data from fortinet firewall via custom command , however i tried below query to get the data . pattern_faz = ```config log fortianalyzer setting set status enable set server {faz:string} ```;foreach device in network.devices/* where device.platform.vendor == Vendor.FORTINET */ let outputs = device.outputsforeach command in outputs.commands where command.commandType == CommandType.CUSTOM where command.commandText == "show log fortianalyzer setting" let configurations = parseConfigBlocks(OS.FORTINET, command.response) foreach match in blockMatches(configurations, pattern_faz)/* where !matches(device.name, "*_*") */ select { deviceName: device.name, SiteName: device.locationName, "Primary DNS": match.data.faz,} but unfortunatelly i m getting zero result. can anyone help on this

Rohit_809 KumarSpotter

asked in NQE Discussions

How can i get the config register value for cisco devices ?

How can i get the config register value for cisco devices ?

HadiRamping Up

asked in NQE Discussions

How to list up all the devices with EOL/S date?

Hi all, I am new to NQE and trying to find out a way to list up all the devices with the EOL/S status.Here is the script which the first phase./*** @intent End-of-life data for operating systems** @description If EoL data is known for the OS of a device,* then that device shows the respected dates, if not EoS related columns shows null.** Data exists for devices running any of these OSes:* ARISTA_EOS, IOS, IOS_XE, IOS_XR, JUNOS, NXOS, and PAN_OS. */ foreach device in network.deviceslet platform = device.platformlet osSupport = platform.osSupport/* where isPresent(osSupport) */select { Device: device.name, Vendor: platform.vendor, Model: platform.model, OS: platform.os, "OS Version": platform.osVersion, "End of OS maintenance": osSupport?.lastMaintenanceDate, "End of OS vulnerability": osSupport?.lastVulnerabilityDate, "End of OS support": osSupport?.lastSupportDate, URL: osSupport?.announcementUrl, Location: device.locationName, Tags: device.tagNames, "Collection IP": devi

hdrewRamping Up

asked in Product Discussions

Forward Network application (system) monitoring

can Forward Network application (itself) integrate with Grafana, or Sysdig for monitoring the system health (i.e. cpu, memory, logfile, processes, filesystem) attributes. would like to send to dashboard tier team monitoring

gbaronSpotter

asked in NQE Discussions

NQE Query for OSPF PEERS

Hello! We are trying to write a NQE referencing the State File OSPF PEERS, but we cant find anything related to code or the CommandType, or any data really, in the NQE data model. Can someone please point me in the right direction.

Rohit_809 KumarSpotter

asked in NQE Discussions

NQE Query for Fortinet Firewall vdom exclude from exiting query.

I am using the NQE query to retrieve Fortinet Firewall NTP details. However, I am also receiving details for VDOM (Virtual Context ) or virtual contexts, which I do not want. Could you please assist me in refining the NQE query to exclude these VDOM details?

asked in NQE Discussions

Syslog Enabled devices list

Hi Team,I need to obtain a list of devices that have syslog enabled as well as those that do not. I have checked the Forward Library and the community but could not find any relevant queries for this purpose. Could you please assist me in generating the list of devices with syslog enabled and those without it? Thank you!

CarlBSpotter

asked in Product Discussions

Can a synthetic node be exported or downloaded to be recreated in a different network?

I have created a synthetic node inside a workspace to run down the various connections for a complex multibranch setup with multiple MPLS vpns and Internet VPNs. Is there a way to move or download the synthetic nodes so I can recreate them inside the parent network now that I have confirmed the accuracy inside the workspace? Note that I am trying to move it from a workspace back to the parent network - otherwise I would just recreate the workspace from the parent and include the synthetic.

Tyson HenrieEmployee

asked in NQE Discussions

List with double quoted items in the list

I had to change a lot, but this keeps the intent. This is from a PANOS firewall. The problem is that I am trying to find the objects in this list. However, some objects have double quotes to show there are spaces in the name of the object and some do not. I’m not sure how to clean this since NQE natively does not use double quotes to designate a single object that happens to contain spaces. sampleInput = """policy { shared; panorama { address-group { THE-GRAPE-Subnets { static [ "Green Grapes Are Good" RedGrapes BlackGrapes "Wine Grapes" PurpleGrapes]; tag GRAPES; description "This is a list of Grapes"; }""";pattern01 = ```policy panorama address-group THE-GRAPE-Subnets static "[ {object: (string*)} ```;foreach x in [1]let config = parseConfigBlocks(OS.PAN_OS, sampleInput)foreach match in blockMatches(config, pattern01)select { objects: match.data, block: match.blocks}Then this is the result from the “objects” column.{object:["Green

CarlBSpotter

asked in NQE Discussions

blockMatches on multiple patterns with the differentiator being a child line of output

I am trying to get data out of a Cisco DMVPN hub on the spokes via NHRP database. Specifically the ARIN addresses and if the spoke has a firewall or other NAT. I was modelling off of this NQE question and it works...except for the 2nd pattern is not detecting the child line.The above question had a parent line that was always present if the new child was present and NHRP has the new child only if there is a NAT in the path while the parent line is always present. The line in question is the “(Claimed NBMA address: <IP address>)” line at the bottom of the 2nd example - it is indented 1 space from the line above ‘NBMA address’ which is always present. I tried both the NHRP data in the data model as well as a custom command ‘show ip nhrp’ with identical results. //NHRP Database output//Command: show ip nhrp//10.100.12.5/32 via 10.100.12.5// Tunnel1 created 1d18h, expire 01:56:31// Type: dynamic, Flags: unique registered nhop// NBMA address: 12.12.31.74//10.100.12.6/32 via 1

CarlBSpotter

asked in NQE Discussions

How to isolate a single commandType output for parsing?

I am trying to get the output from commandType NHRP_STATE so I can then pull out the tunnel peer IPs with a patternmatch. When the NHRP table was a custom command the command.commandText was able to get this information, now how to do so that NHRP is part of the data model?

pjptsujitRamping Up

asked in NQE Discussions

Split the output string value

foreach device in network.devicesselect { deviceName: device.name}For the above NQE, if I get the device names in the format “aaa_bbb_ccc”, is there a way to split the output based on the string “_” and have three different fields?

venkat rajRamping Up

asked in NQE Discussions

Interface Errors and/or High utilization verification

I am trying to get an NQE scheduled to run every 5 mins. and fetch if an interface has any errors and/or if the interface utilization is high ( >90%).With the below NQE i get an error as below - Any fields with bytes is not recognized..ERROR: Record does not have field: "bytesOut". interfaceUtilization(iface) = 100 * (sum(iface.bytesOut) - sum(iface.bytesIn)) / (sum(iface.bytesOut) + sum(iface.bytesIn));foreach device in network.devicesforeach interface in device.interfaceswhere interface.adminStatus == AdminStatus.UPselect { deviceName: device.name, interfaceName: interface.name, utilization: interfaceUtilization(interface)} Not sure why “bytes” is not recognized by the NQE How to have this scheduled to run every 5 mins ?

gbaronSpotter

asked in NQE Discussions

How too data from comment fields in a config file via NQE

The below are two lines that we are trying to pull data out of, but it appears utilizing device.file.config from the data model wont return the information because they are comments? Thoughts? !! Last configuration change at 13:58:30 ZULU Fri Oct 25 2024 by personx! NVRAM config last updated at 14:01:13 ZULU Thu Aug 22 2024 by persony!

AndyLSpotter

asked in NQE Discussions

NQE use of limit and offset in API

I have several questions around the NQE api endpoint for running a queries. This endpoint has parameters for limit and offset for the number of records to skip and how many records to request.(example from the documentation){ "query": "foreach d in network.devices select { Name: d.name }", "queryId": "FQ_ac651cb2901b067fe7dbfb511613ab44776d8029", "commitId": "84f84b0c0a0a1805ddff0ca5451c2c55c58605e5", "queryOptions": { "offset": 20, "limit": 100, "sortBy": { "columnName": "Name", "order": "ASC" }, "columnFilters": [ { "columnName": "Name", "value": "MyDeviceName" } ] }, "parameters": { "mtuThreshold": 123, "ntpServers": [ "10.22.2.3", "192.33.4.1" ] }} I have a few questions, and would appreciate any guidance the community can providehow do i know the total number of records that is available ? do i just ask for the next number of records and if none are returned then i have the full set ? if i run the api fo

asked in NQE Discussions

Invalid module path

[Resolved]Hi team,when I am trying to use one NQE query for public IPs from Forward Network NQE Library to use it further more on my query, I am getting error while using this. Its showing me module error.

Rohit_809 KumarSpotter

asked in NQE Discussions

how can i get F5 Vip ip and Pool address details by NQE

Hi Team , How can i get F5 VIP Ip and Pool address details by NQE. ThanksRohit

pjptsujitRamping Up

asked in NQE Discussions

Getting Pool and Pool members from device.outputs.commands

Under the command type F5_LTM_POOL_STATE for F5 devices, the pool and pool members are in the following format:---------------------------------------------------------------------------------------Ltm::Pool: XXX ---------------------------------------------------------------------------------------Status Availability : XXX State : XXX ... -------------------------------------------------------------- | Ltm::Pool Member: XXX -------------------------------------------------------------- | Status | Availability : XXX | State : XXX ... -------------------------------------------------------------- | Ltm::Pool Member: XXX -------------------------------------------------------------- | Status

dakotaglorySpotter

asked in NQE Discussions

Custom source appends zeros to microsecond value; extractJson interprets as Float

I have a custom source that is appending zeros to the end of the microseconds which may be the cause of FN seeing it as a Float. Would it be possible in future versions to force a string data type so it might be manipulated or is there any other way I can manage this from the FN side? Excited to begin using the date and timestamp functions. Do you think they will become data types that could be used in the extractJson strings eventually? Custom source value: extractJson code: If i change the value to Number or String the query errors because it sees that value as a Floatselect code: Result:

dakotaglorySpotter

asked in NQE Discussions

Is it possible to extract a value from a subList?

parserecords(ep) = foreach x in [0] let recordid = extractJson[{ kind: String, selfLink: String, items: List<{ subList:List List<{ kind: String, selfLink: String, name: String }> }> }]foreach hs in network.externalSources.httpSourcesforeach ep in hs.endpointswhere ep.name == "endpointname" && ep.statusCode == 200let recordItems = (min(parserecords(ep))).itemsforeach i in recordItemsselect { SrcName: hs.name, subListName: i.subList.name}///////////////////////// Oops! The query doesn't work ///////////////Address the following issues: - Line xx, character xx: Can't access field 'name' from 'i.subList', because that is a List<{kind: String, selfLink: String, name:String}>.

dakotaglorySpotter

asked in NQE Discussions

Convert MicroSeconds in NQE

A custom source API call returns a date field in microseconds format. Does NQE have a built in function to convert? For example, 1725899407, to Sept. 9, 2024. Currently I don’t need the hours and minutes but in the future it may be necessary. I’ve searched “date” and “microseconds” in the documentation and online without success.

dakotaglorySpotter

asked in NQE Discussions

NQE Results Filter

Borrowing a capture of the Results window from another post on this site for reference, is it possible to filter for values that are not present?For example, instead of “cisco” could I return records that are !=cisco. I understand I have the options to write it in the NQE or export into Excel and filter as a spreadsheet but it would be useful to have the ability to filter other comparison operators on the fly in the Results window.

pjptsujitRamping Up

asked in NQE Discussions

How can I convert a Number to a String ?

Is there a command equivalent to str(X) in Forward Networks?

1
2
3

Page 1 / 3

CarlBhas earned the badge Community Champ Award
Christopherhas earned the badge Community Champ Award
Rohit_809 Kumarhas earned the badge NQE Collaborator
Vladi Bhas earned the badge Community Champ Award
dakotagloryhas earned the badge Community Champ Award

Show all badges

Powered by Gainsight

Terms of Use Cookie settings

Sign up

Already have an account? Login

Select a login option:

Register / Login Forward Employee Login

Welcome to the Forward Networks Community

Select a login option:

Register / Login Forward Employee Login

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

OK

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

OK