topic Re: Enable logging using on multiples rules in Network Security

Enable logging using on multiples rules

O.Zang — Fri, 21 Feb 2020 17:05:00 GMT

Hello Team,

I have to enable logging on more than 3000 policy rules.

Can you please share a way to do this ?

Thanks in advance for your helps.

Regards,

Zanga

Re: Enable logging using on multiples rules

Francesco Molino — Mon, 29 Apr 2019 04:26:28 GMT

Hi

Are using fmc or fdm?
Using FMC, you can make API calls to modify your access policies logging.
Go to your fmc webpage by adding: ..../api/api-explorer and take a look on policy apis.

Re: Enable logging using on multiples rules

O.Zang — Mon, 29 Apr 2019 15:19:11 GMT

Hi Francesco,

I am using Fmc.
Please how can i find the policy id to edit ?
Do i have to specify each rules it the script ?

Thanks for your Helps.
regards,
Zanga

Re: Enable logging using on multiples rules

Francesco Molino — Tue, 30 Apr 2019 21:14:50 GMT

You will need to get your container-id which corresponds to your parent ACP (Access Control Policy) using URL:

https://fmc.supportlan.com/api/fmc_config/v1/domain/Domain-UUID/policy/accesspolicies

This will return your contained-id.

Once done, you will read all access rules into this container id using url:

https://fmc.supportlan.com/api/fmc_config/v1/domain/Domain-UUID/policy/accesspolicies/Container-UUID/accessrules

And then you will get all your rules with their ID. Finally, just do a loop for every rules you have to modify your logging configuration.

Hope that clarify a bit

Re: Enable logging using on multiples rules

O.Zang — Tue, 25 Jun 2019 16:20:36 GMT

Hello Francesco,

Thanks for your answer.

I am still not able to enable loggin, Can you please help me ?

Re: Enable logging using on multiples rules

Francesco Molino — Thu, 27 Jun 2019 04:25:41 GMT

What do you mean you're not able to connect? I see a get success on your print screen.

Are you trying to access from outside the dcloud? Not sure you can do that.

Re: Enable logging using on multiples rules

O.Zang — Thu, 27 Jun 2019 10:05:07 GMT

Hello Francesco,

yes did a get which shows the rules .

I am failling at this step: And then you will get all your rules with their ID. Finally, just do a loop for every rules you have to modify your logging configuration.

I got syntax error each time I tryed.

Regards,
Zanga

Re: Enable logging using on multiples rules

Francesco Molino — Fri, 28 Jun 2019 21:39:23 GMT

Can you share what you've done so far and show where you're getting the syntax error.
This WE is a long weekend in Canada but I'm going to do my best to answer soon.