Skip to main content

Unanswered questions

24 Topics
R
Spotter
Rohit_809 KumarSpotter
asked in NQE
how can i get the F5 POOL Member name ip and state and availability

how can i get the F5 POOL Member name ip and state and availability ?

7
G
Employee
2 days ago
R
Spotter
Rohit_809 KumarSpotter
asked in NQE
F5 Partition NQE not fullfil requirement

i am using below query to get the F5 Partition details.======================== foreach device in network.deviceswhere device.platform.vendor == Vendor.F5let outputs = device.outputsforeach c in outputs.commandswhere c.commandType == CommandType.PARTITION_CONFIGselect {  Device: device.name,  Location: device.locationName,  "Partition Name": c.response}=====================================  but the output is not looks good , i am also getting the Partition description in Output , i just need only Partition name only , Please help   

1
G
Employee
2 days ago
A
Spotter
AndyLSpotter
asked in NQE
NQE use of limit and offset in API

I have several questions around the NQE api endpoint for running a queries. This endpoint has parameters for limit and offset for the number of records to skip and how many records to request.(example from the documentation){  "query": "foreach d in network.devices select { Name: d.name }",  "queryId": "FQ_ac651cb2901b067fe7dbfb511613ab44776d8029",  "commitId": "84f84b0c0a0a1805ddff0ca5451c2c55c58605e5",  "queryOptions": {    "offset": 20,    "limit": 100,    "sortBy": {      "columnName": "Name",      "order": "ASC"    },    "columnFilters": [      {        "columnName": "Name",        "value": "MyDeviceName"      }    ]  },  "parameters": {    "mtuThreshold": 123,    "ntpServers": [      "10.22.2.3",      "192.33.4.1"    ]  }} I have a few questions, and would appreciate any guidance the community can providehow do i know the total number of records that is available ? do i just ask for the next number of records and if none are returned then i have the full set ? if i run the api fo

2
Andreas
Employee
4 days ago
D
DannyRRamping Up
asked in Product Discussions
How do I add a device from the parent network to an existing workspace network?

I was helping some folks in getting familiar with Forward Networks, we were having trouble in adding in new devices (that already exist in the parent network) in to the already created workspace. The existing options to add devices in the workspace looks to only include ways to create new connections to those devices. But I did not see any way for me to pull in existing devices from the parent network, after the workspace was already created. Does anyone have any insight into this?

3
davetee
Community Manager
12 days ago
V
VarunS
asked in NQE
Fortinet SNMP Configurations

Hi Team,Can you please help me with a NQE Query to get SNMP configured IPs on Fortinet Devices. 

3
C
Employee
19 days ago
P
pjptsujitRamping Up
asked in NQE
Can user defined functions return a Number?

For a user defined function as follows, can it be used to return a number or does it only return a Bool value? threshold : Number = 100;hasManySubInterfaces(iface) : Bool = length(iface.subinterfaces) > threshold; Say something like the following, is that possible? threshold : Number = 100;hasManySubInterfaces(iface) : Number= length(iface.subinterfaces) + threshold;

2
G
Employee
23 days ago
D
Spotter
dakotaglorySpotter
asked in NQE
Do blockMatches require consistent line patterns?

Do patterns need to be standardized or will blockMatches match when lines are missing? pattern=```line one {main:string}    sub-line1 may or may not be consistently present    sub-line2 may or may not be consistently present    sub-line3 {value1:string} is target and sub-line3 will always be there    sub-line4 may or may not be consistently present    sub-line5 may or may not be consistently present    sub-line6 may or may not be consistently present    sub-line7 may or may not be consistently present    sub-line8 {value2:string} is target and sub-line8 will always be there         sub-sub-line9 {value3:string} is target and sub-sub-line9 will always be there        sub-line10 may or may not be consistently present    sub-line11 may or may not be consistently present    sub-line12 {value4:string} is target and may or may not be present         sub-sub-line13 {value5:string} is target and sub-sub-line13 will be there if sub-line12 is present    sub-line14 may or may not be consistently

5
V
Employee
1 month ago
N
Spotter
NandSpotter
asked in NQE
Nqe query for BGP Admin status id down

Hi All, Can you please help me to write a NQE query for all ip details where BGP Admin status  id is showing down.

3
RobertWelch
Employee
1 month ago
R
rathidRamping Up
asked in NQE
Path MTU query

what is format to pass the  the path  parameter in Path Mtu consistency check ?is it a list of devices ? is it a traceroute ?or source or destination ip ? 

2
Tyson Henrie
Employee
1 month ago
A
alineamorimRamping Up
asked in NQE
NQE for OneIP table

How would one replicate the OneIP table with NQE, including info such as IP address, MAC address, vendor, switch name and switch port?

1
Andreas
Employee
1 month ago
cariddir
Spotter
cariddirSpotter
asked in NQE
Using NQE to get BGP routes advertised.

Has anyone put together a simple Query to grab the advertised routes to a BGP Peer?I haven’t had much time to try, but maybe someone has done this on side.In summary, I want to try and associate routes to a device/location in our branch environment.foreach device in network.deviceswhere "Branch" in device.tagNames && "WAN" in device.tagNames I thought there would be some simple query in the model to just pull ‘bgp advertised routes’ and I could limit it with the above, and associate that route to that location. But after looking for 10 min, I couldn’t find anything of use. Anyway, if anyone has done something, it would be great to see/try. I saw a very ‘wild’ one on the community @baher , amazing work BTW.But i’m basically looking for the result of the routes advertised to any BGP neighbor.

4
C
Employee
1 month ago
S
Sebastian CorosRamping Up
asked in Product Discussions
How to pull device files from multiple devices at once via the API

Hi Forward Networks team, I am looking at the API, specifically the call to get a device's data files.I can get the files for a single device at a time by just putting in the hostname in the parameters, however I was wondering if there is a parameter which will allow me to pull from multiple devices at once.For example lets say I want to pull from devices ABC, DEF, GHIorI want to pull from every device that starts with ABC*Is this something that can be done?Or would another possibility be to create a separate group of devices which includes all the devices I want to pull from and then just run the GET call on that device group. Kind regards,Sebastian

5
G
Employee
1 month ago
D
DannyRRamping Up
asked in Product Discussions
DELIVERED_TO_INCORRECT_LOCATION API Status Clarification

Hello,I have a question when using the Search Path API.Could we get an elaboration on the meaning of that “DELIVERED_TO_INCORRECT_LOCATION” forward outcome status, such as why it appears and if there’s anything we can do to address the “INCORRECT_LOCATION” part, if it’s necessary?I presume the status means that somewhere along the routing, it somehow ended up at a destination Forward Networks didn’t expect. But I just wanted to know if there was any more to it.Thanks!

2
C
Employee
2 months ago
N
Spotter
NandSpotter
asked in NQE
Forward Networks Cloud Objects Count difference through NQE Query

Hi Team,We want to fetch the Cloud objects difference count that compare today and yesterday(For example) Snapshot and provide the missing Cloud objects details which are missing from Current snapshot through NQE Query. Please assist us if anyone can relate with this.

1
G
Employee
2 months ago
A
Spotter
AndyLSpotter
asked in NQE
Using NQE to generate output for L3VPN

Is there any additional documentation as to what needs to be included in any NQE query that is used to dynamically create l3vpn synthetic devices ?

2
A
Spotter
3 months ago
N
Spotter
NandSpotter
asked in NQE
Interface alias details for Fortinet Firewall from NQE query

Hi All,Need to fetch interface alias details of Fortinet firewalls from NQE query. Please help me to build the logic.

4
N
Spotter
3 months ago
V
VarunS
asked in Product Discussions
API URL

need to get api nodes url

1
G
Employee
3 months ago
RonAvila
RonAvilaRamping Up
asked in NQE
NQE example similar to using grep and awk

when going through devices with interface descriptions, for exampledescription “to site x interface gi0/0”;description “to site y interfaace gi0/1”:block pattern is description {desc:string}Since it is a description with multiple words and space delimited, is there a way to get the entire description no matter how many words there are?  As the above would only get the first word.similar to the way I would use grep for example:grep '^description' ciscoconfig.txtor if I wanted specific columns or text within lines beginning with description, I would grep and use awk like belowgrep '^description' ciscoconfig.txt | awk '{print $2}'grep '^description' ciscoconfig.txt | awk '{print $2 $4}'grep '^description' ciscoconfig.txt | awk '{print $4 $2}'Etc.can anybody provide an NQE Example, Thanks

7
RonAvila
4 months ago
Tyson Henrie
Employee
Tyson HenrieEmployee
asked in NQE
match two lines with different amounts of output

I have a problem where the two lines of this module output are not the same.  How can I put in essentially null place holders so that they resultant patterns are the "same"?example outputNotice that module 2 does not have Fw or Sw.Mod MAC addresses Hw Fw Sw Status 1 a03d.6f81.0740 to a03d.6f81.074f 1.1 15.0(1r)SG12 03.07.03.E Ok 2 b0aa.777d.d010 to b0aa.777d.d017 1.0 Ok  I was trying to use these two patterns and tried to put in placeholds of Fw and Sw at the end of "pattern03".  But the NQE does not like this.pattern02 = ```Mod MAC addresses {modNum:number} {string} to {string} {hwVer:string} {fwVer:string} {swVer:string} {modStatus:string}```;pattern03 = ```Mod MAC addresses {modNum:number} {string} to {string} {hwVer:string} {modStatus:string} {fwVer: null:string} {swVer: null:string}```;getMacAddrList(parsedOutput) = foreach pattern in [pattern02, pattern03] foreach match in blockMatches

4
G
Employee
4 months ago
I
imageryanRamping Up
asked in Product Discussions
Retrieval of Cisco Firepower device information

We have started to do some testing with FN. In our AWS network, we are using Cisco Firepower Threat Defense (FTD) devices managed by Firepower Management Console (FMC). FN is able to connect to an FTD and retrieve device details but does not support retrieval from FMC.In our network, for complicated routing reasons, we can’t easily enable FN to connect to our FTD instances. I can, however, provide a URL that will retrieve all the information from FMC. I would like to configure an “HTTP(S) external source” to provide that info. What I cannot figure out, however, is the required format for the data to that is returned by the URL GET. The document just states that FN will “infer” the schema. In my case, there’s no inference needed. I am writing the code that will return the info. I can format the data however FN needs it.For those who care about the details, the implementation is an AWS Lambda function that connects to the FMC REST API and returns the info. An AWS API gateway provides the

1
captainpacket
Employee
6 months ago
B
BDrinkardRamping Up
asked in NQE
NQE Check EC2 Instance for 'default' Security Group

Morning folks! We recently got the opportunity to leverage Forward Networks NQE for a Cyber Security ask. They want to verify that EC2 Instances are not being assigned the default Security Group. This should be a simple enough task. AWS creates the security group with the name ‘default’ so all we need to do is create an NQE Query that checks our Cloud Objects with a type of ‘instance’ and verify that the list (I’m assuming it is a list type) of security groups does not contain ‘default’. However, after reviewing the NQE Data Model I’m not convinced the ‘Cloud Objects’ are exposed in such a way we can correlate instance to security group. Can someone confirm or deny this?I do see that the instance tags are exposed as part of the ComputeInstance data model, so a workaround would be for us to edit our Terraform code so that security groups assigned to the instance are also created as tags on the instance so we can expose that correlation for consumption in NQE.

3
captainpacket
Employee
8 months ago
B
BDrinkardRamping Up
asked in Product Discussions
Has anyone modeled corporate VPN?

Hey Folks!I’m looking to find out if anyone has modeled their corporate VPN access - maybe using Synthetic Devices - in such a way that allows you to search for user workflows to determine if they are allowed, and have them properly modeled as coming in through the VPN Firewall instead of at the switch VLAN. We are looking to create intent checks for access through our VPN. Happy NQEing!

2
J
Employee
9 months ago
R
rrogers33Ramping Up
asked in NQE
NQE for confirming configuration within Cisco switch interfaces

Hi!  Looking for help with an NQE to scan/identify configuration for all Cisco switches within a workspace that contain one of two QOS policy maps within at least one of the device interfaces. For example interface gigabitethernet1/1 service-policy output 1P7Q3T orservice-policy output 1P7Q1T Thanks        

4
G
Employee
10 months ago
E
ebalaRamping Up
asked in NQE
BGP advertised and received routes for Arista EOS and NXOS devices

I am trying to get the BGP advertised and received prefixes for Arista EOS and Cisco NXOA devices. I tried the below two queries and they only work for IOS and IOS-XE. devicesBGP Received routes ----------------------------------------------------------foreach device in network.devices// where device.name == "jcdwans01"where isPresent(device.bgpRib)let bgpRib = device.bgpRibforeach afiSafi in bgpRib.afiSafisforeach neighbor in afiSafi.neighborswhere isPresent(neighbor.adjRibInPost)let adjRibInPost = neighbor.adjRibInPostselect {  deviceName: device.name,  platform: device.platform.os,  afiSafiAfiSafiName: afiSafi.afiSafiName,  neighborNeighborAddress: neighbor.neighborAddress,  routesCount: length(adjRibInPost.routes)}BGP advertised routes -foreach device in network.deviceswhere isPresent(device.bgpRib)let bgpRib = device.bgpRibforeach afiSafi in bgpRib.afiSafisforeach neighbor in afiSafi.neighborswhere isPresent(neighbor.adjRibOutPost)let adjRibOutPost = neighbor.adjRibOutPostforeach

1
Tyson Henrie
Employee
10 months ago
  • NQE Contributor
    Rohit_809 Kumarhas earned the badge NQE Contributor
  • NQE Contributor
    dakotagloryhas earned the badge NQE Contributor
  • Community Champ Award
    GaryBhas earned the badge Community Champ Award
  • Community Champ Award
    AndyLhas earned the badge Community Champ Award
  • NQE Contributor
    Christopherhas earned the badge NQE Contributor
Show all badges
Terms of UseCookie settings