My recommendation is always to start small, then slowly build from there. A tool I always recommend to other engineers to utilize when getting a feel for APIs in general is curl. Curl will let you quickly attempt to consume APIs and has helped me in the past for many reasons. Quick example:
1: GET endpoint ID by filter on MAC:
curl -k --include --header 'Content-Type:application/json' --header 'Accept: application/json' --user <user>:<pass> --request GET https://ise pan ip:9060/ers/config/endpoint?filter=mac.EQ.54:XX:XX:35:AD
Additional curl info: curl - Unix, Linux Command - Tutorialspoint
Brief overview of ISE Rest API filters:
--Cisco ISE REST API filters--
EQ: Equals
NEQ: Not Equals
GT: Greater Than
LT: Less Then
STARTW: Starts With
NSTARTSW: Not Starts With
ENDSW: Ends With
NENDSW: Not Ends With
CONTAINS: Contains
NCONTAINS: Not Contains
Quick python script example I have used in the past to view two different endpoint groups' members (MACs) & print to screen + CSV file. Maybe it will help shed some tshooting light:
#!/usr/bin/python
import json
import requests
import warnings
import sys
import csv
#ignore invalid cert warnings
warnings.filterwarnings("ignore")
groupID = ("")
temp = ("")
temp1 = ("")
temp2 = ("")
USR_CHOICE = raw_input ("Do you want to see MACs in Hard Quarantine (1) or Soft Quarantine group(2)? ")
while USR_CHOICE not in ('1','2'):
print "************************************"
print "Error! You must enter 1 (Hard) or 2 (Soft)"
print "************************************"
sys.exit()
if USR_CHOICE == '1':
groupID = '4bfdafa0-XXXXX-123340ab3cd6'
temp = 'Hard Q'
else:
groupID = 'aa000c30XXXXXX5400b48521'
temp = 'Soft Q'
API_DEVICE = "https://ISE_PAN_IP:9060/ers/config/endpoint?filter=groupId.EQ." + groupID + "&size=100"
API_ERS_USER = "USER","PASS"
HEADERS = {
'Accept': "application/json",
'Content-Type': "application/json",
}
r = requests.get(url=API_DEVICE, auth=API_ERS_USER, headers=HEADERS, verify=True)
#print r.text
data = r.text
endPoints = json.loads(data)
print "Total Number of Endpoints in " + temp + " Group:",endPoints['SearchResult']['total']
print "---------------------------------------"
f = open ('Grp_Macs.csv','w')
w = csv.DictWriter(f, fieldnames = ['MAC Address','Description'])
w.writeheader()
f.close()
for MAC in endPoints ["SearchResult"]["resources"]:
temp1 = MAC['name']
with open ('Grp_Macs.csv','a') as csvfile:
w = csv.writer(csvfile)
try:
temp2 = MAC['description']
w.writerow([temp1, temp2])
print "MAC Address:", temp1, "||", "Description:", temp2
except KeyError:
w.writerow([temp1, temp2])
print "MAC Address:", temp1, "||", "Description:"""
continue
with open ('Grp_Macs.csv','a') as csvfile:
w = csv.writer(csvfile)
TOTAL = endPoints['SearchResult']['total']
w.writerow(['Total Endpoints:', TOTAL])
sys.exit()
