Skip to main content

Unanswered questions

36 Topics
R
Spotter
Rohit_809 KumarSpotter
asked in Product Discussions
How can i add Custom command on FWN for fortinet firewall

How can i add Custom command for fortinet. command that i am looking. show system dns. show system ntp. show system central-management config system central-management. 

15818
R
Spotter
7 days ago
J
javeedfRamping Up
asked in NQE
length of  vrrpFhrpGroupsCount is retured as 0 for VRRP configured device

vlan456 is configured with VRRP group 456, for the below query, length of vrrpFhrpGroupsCount is returned as 0configuration snippet:interface vlan456 no shutdown ip address 10.7.0.1/26 ip pim sparse-mode ip igmp version 3 ! vrrp-group 456  priority 110  virtual-address 10.7.0.7!for the below query,@queryget_vrrp_details(host_pattern: String) =    foreach device in network.devices        where matches(device.name, toUpperCase(host_pattern))            foreach interface in device.interfaces            where isPresent(interface.routedVlan)            let routedVlan = interface.routedVlan            let ipv4 = routedVlan.ipv4            let fhrp = ipv4.fhrp            let vrrp = fhrp.vrrp            select {            deviceName: device.name,            interfaceName: interface.name,            vlan: routedVlan.vlan,            hsrpFhrpGroupsCount: length(fhrp.hsrp.fhrpGroups),            vrrpFhrpGroupsCount: length(fhrp.vrrp.fhrpGroups)              }; length of  vrrpFhrpGroupsCount is r

373
G
Employee
8 days ago
D
Spotter
dakotaglorySpotter
asked in NQE
Do blockMatches require consistent line patterns?

Do patterns need to be standardized or will blockMatches match when lines are missing? pattern=```line one {main:string}    sub-line1 may or may not be consistently present    sub-line2 may or may not be consistently present    sub-line3 {value1:string} is target and sub-line3 will always be there    sub-line4 may or may not be consistently present    sub-line5 may or may not be consistently present    sub-line6 may or may not be consistently present    sub-line7 may or may not be consistently present    sub-line8 {value2:string} is target and sub-line8 will always be there         sub-sub-line9 {value3:string} is target and sub-sub-line9 will always be there        sub-line10 may or may not be consistently present    sub-line11 may or may not be consistently present    sub-line12 {value4:string} is target and may or may not be present         sub-sub-line13 {value5:string} is target and sub-sub-line13 will be there if sub-line12 is present    sub-line14 may or may not be consistently

1269
Tyson Henrie
Employee
13 days ago
B
BillWRamping Up
asked in Product Discussions
run nqe immediately after snapshot completes

is it possible to run NQEs immediately after a snapshot completes?  If Forward can baseline what NQEs are always run after a snapshot completes (possibly this data baseline is based upon a period of time such as 30 days or some admin defined time period).  Administrators can use this baseline data to flag those NQEs of priority to run immediately after the snapshot completes.  in this way, results from priority NQEs are immediately available (from cached results) for applications to use with minimal delay.

231
RobertWelch
Employee
14 days ago
R
Spotter
Rohit_809 KumarSpotter
asked in NQE
how can i get the Egress and Ingress IP Details by NQE

how can i get the Egress and Ingress IP Details by NQE 

524
G
Employee
15 days ago
V
Spotter
VarunS
asked in NQE
Public IPs from where outside traffic is coming Internal Network

Need one NQE Queries for Public IPs only from where outside traffic is coming to my internal network. Also want to get the output of below command on Fortinet Firewall through NQE Queries. “ local route prefix list ”I used one NQE Query that already on Forward Library - “Interfaces Using Public IPv4 Addresses” but this is not fulfilling my requirement. Tried Forward AI Assist also but not useful in this scenario.Can you please help me on this ? 

291
Mullers
Employee
15 days ago
P
pjptsujitRamping Up
asked in NQE
Getting VRRP peers

Is there a way to get the pair of switches for the VRRP protocol using NQE?

341
Tyson Henrie
Employee
20 days ago
R
Spotter
Rohit_809 KumarSpotter
asked in NQE
NQE Query for F5 NTP Server details from config, Please help us to collect this data.

NQE Query for F5 NTP Server details from config, Please help us to collect this data.

382
C
Employee
22 days ago
R
Spotter
Rohit_809 KumarSpotter
asked in NQE
Merge NQE Query

how can i merger 2 or 3 NQE Query into 1 , so that i can get output in single file.

442
Tyson Henrie
Employee
23 days ago
V
Spotter
VarunS
asked in NQE
Request for all firewalls, verifying NTP, DNS, and FortiGuard configurations.

Hi Team, Can you help to get all the details verifying NTP/DNS and Fortiguard configuratioins ?

1029
V
Employee
23 days ago
R
Spotter
Rohit_809 KumarSpotter
asked in Product Discussions
Custom command format for Foritnet

we are using below format to collect the data from Fortinet firewall for custom command. endconfig globalshow system dnsshow system ntp can anyone check and confirm ,these will not impact anything ,if i remove config gloabl , than command will not run. 

282
R
Spotter
27 days ago
R
Spotter
Rohit_809 KumarSpotter
asked in NQE
Not able to see outut by NQE

Team, i am using below query to get the virtual server name and dst ip from below query , but somehow i am getting 0 result , can anyone please help . -=-------------------- pattern01 = ```Ltm::Virtual Server: {VirtualServer: string}    |   Availability   : {Availability: string}              |   State          : {State: string}                |   IP Address     : {Destination: ipv4Address}    |   Reason         : {Reason: string}```; foreach device in network.deviceswhere device.platform.vendor == Vendor.F5where device.snapshotInfo.result == DeviceSnapshotResult.completedforeach command in device.outputs.commandswhere command.commandType == CommandType.F5_VIRTUAL_SERVER_STATElet text = command.responselet text = replaceMatches(text, "\n", "\n    ")let text = replaceMatches(text, "    Ltm::Virtual Server: ", "Ltm::VirtualServer: ")let parsedCommand = parseConfigBlocks(OS.F5, text)foreach match in blockMatches(parsedCommand, pattern01)select {  device: device.name, VirtualServer: match.

684
R
Spotter
29 days ago
G
Spotter
gbaronSpotter
asked in Product Discussions
Collecting custom command "show configuratation" within a a Cisco FPR running on FXOS

For reference - we recently were able to get Cisco Firepower ASA operating as FTD and FPRs on IOS FXOS, for the first time.  With that…. Since none of the default commands produce any data in the state files, we are trying to use custom commands.  Right now, when performing a show run, it comes back with 25 lines of configs, but then stops at --More--, which is when a user via cli would would push a button.  We have lots of other devices running custom commands that do not do this, so why is it happening with FXOS and how can we work around it? Also, the FTD devices reporting all state files properly, its just the FPRs that are having issues.

481
V
Employee
30 days ago
R
Spotter
Rohit_809 KumarSpotter
asked in NQE
how can i get the F5 POOL Member name ip and state and availability

how can i get the F5 POOL Member name ip and state and availability ?

9713
Tyson Henrie
Employee
1 month ago
G
Spotter
gbaronSpotter
asked in Product Discussions
how to find postgress version

What command can be ran from the CLI to find the postgres version?

384
G
Spotter
1 month ago
R
Spotter
Rohit_809 KumarSpotter
asked in NQE
F5 Partition NQE not fullfil requirement

i am using below query to get the F5 Partition details.======================== foreach device in network.deviceswhere device.platform.vendor == Vendor.F5let outputs = device.outputsforeach c in outputs.commandswhere c.commandType == CommandType.PARTITION_CONFIGselect {  Device: device.name,  Location: device.locationName,  "Partition Name": c.response}=====================================  but the output is not looks good , i am also getting the Partition description in Output , i just need only Partition name only , Please help   

211
G
Employee
1 month ago
D
DannyRRamping Up
asked in Product Discussions
How do I add a device from the parent network to an existing workspace network?

I was helping some folks in getting familiar with Forward Networks, we were having trouble in adding in new devices (that already exist in the parent network) in to the already created workspace. The existing options to add devices in the workspace looks to only include ways to create new connections to those devices. But I did not see any way for me to pull in existing devices from the parent network, after the workspace was already created. Does anyone have any insight into this?

513
davetee
Community Manager
1 month ago
V
Spotter
VarunS
asked in NQE
Fortinet SNMP Configurations

Hi Team,Can you please help me with a NQE Query to get SNMP configured IPs on Fortinet Devices. 

663
C
Employee
1 month ago
P
pjptsujitRamping Up
asked in NQE
Can user defined functions return a Number?

For a user defined function as follows, can it be used to return a number or does it only return a Bool value? threshold : Number = 100;hasManySubInterfaces(iface) : Bool = length(iface.subinterfaces) > threshold; Say something like the following, is that possible? threshold : Number = 100;hasManySubInterfaces(iface) : Number= length(iface.subinterfaces) + threshold;

202
G
Employee
2 months ago
N
Spotter
NandSpotter
asked in NQE
Nqe query for BGP Admin status id down

Hi All, Can you please help me to write a NQE query for all ip details where BGP Admin status  id is showing down.

363
RobertWelch
Employee
2 months ago
R
rathidRamping Up
asked in NQE
Path MTU query

what is format to pass the  the path  parameter in Path Mtu consistency check ?is it a list of devices ? is it a traceroute ?or source or destination ip ? 

652
Tyson Henrie
Employee
2 months ago
A
alineamorimRamping Up
asked in NQE
NQE for OneIP table

How would one replicate the OneIP table with NQE, including info such as IP address, MAC address, vendor, switch name and switch port?

801
Andreas
Employee
2 months ago
cariddir
Spotter
cariddirSpotter
asked in NQE
Using NQE to get BGP routes advertised.

Has anyone put together a simple Query to grab the advertised routes to a BGP Peer?I haven’t had much time to try, but maybe someone has done this on side.In summary, I want to try and associate routes to a device/location in our branch environment.foreach device in network.deviceswhere "Branch" in device.tagNames && "WAN" in device.tagNames I thought there would be some simple query in the model to just pull ‘bgp advertised routes’ and I could limit it with the above, and associate that route to that location. But after looking for 10 min, I couldn’t find anything of use. Anyway, if anyone has done something, it would be great to see/try. I saw a very ‘wild’ one on the community @baher , amazing work BTW.But i’m basically looking for the result of the routes advertised to any BGP neighbor.

634
C
Employee
2 months ago
S
Sebastian CorosRamping Up
asked in Product Discussions
How to pull device files from multiple devices at once via the API

Hi Forward Networks team, I am looking at the API, specifically the call to get a device's data files.I can get the files for a single device at a time by just putting in the hostname in the parameters, however I was wondering if there is a parameter which will allow me to pull from multiple devices at once.For example lets say I want to pull from devices ABC, DEF, GHIorI want to pull from every device that starts with ABC*Is this something that can be done?Or would another possibility be to create a separate group of devices which includes all the devices I want to pull from and then just run the GET call on that device group. Kind regards,Sebastian

815
G
Employee
3 months ago
D
DannyRRamping Up
asked in Product Discussions
DELIVERED_TO_INCORRECT_LOCATION API Status Clarification

Hello,I have a question when using the Search Path API.Could we get an elaboration on the meaning of that “DELIVERED_TO_INCORRECT_LOCATION” forward outcome status, such as why it appears and if there’s anything we can do to address the “INCORRECT_LOCATION” part, if it’s necessary?I presume the status means that somewhere along the routing, it somehow ended up at a destination Forward Networks didn’t expect. But I just wanted to know if there was any more to it.Thanks!

282
C
Employee
3 months ago
Show all badges
Terms of UseCookie settings