Enable logging using on multiples rules

[O.Zang]

Hello Team,

I have to enable logging on more than 3000 policy rules.

Can you please share a way to do this ?

Thanks in advance for your helps.

Regards,

Zanga

[Francesco Molino]

Hi

Are using fmc or fdm?
Using FMC, you can make API calls to modify your access policies logging.
Go to your fmc webpage by adding: ..../api/api-explorer and take a look on policy apis.

[O.Zang]

Hi Francesco,

I am using Fmc.
Please how can i find the policy id to edit ?
Do i have to specify each rules it the script ?

Thanks for your Helps.
regards,
Zanga

[Francesco Molino]

You will need to get your container-id which corresponds to your parent ACP (Access Control Policy) using URL:

https://fmc.supportlan.com/api/fmc_config/v1/domain/Domain-UUID/policy/accesspolicies

This will return your contained-id.

Once done, you will read all access rules into this container id using url:

https://fmc.supportlan.com/api/fmc_config/v1/domain/Domain-UUID/policy/accesspolicies/Container-UUID/accessrules

And then you will get all your rules with their ID. Finally, just do a loop for every rules you have to modify your logging configuration.

Hope that clarify a bit

[O.Zang]

Hello Francesco,

Thanks for your answer.

I am still not able to enable loggin, Can you please help me ?

[Francesco Molino]

What do you mean you're not able to connect? I see a get success on your print screen.

Are you trying to access from outside the dcloud? Not sure you can do that.

[O.Zang]

Hello Francesco,

yes did a get which shows the rules .

I am failling at this step: And then you will get all your rules with their ID. Finally, just do a loop for every rules you have to modify your logging configuration.

I got syntax error each time I tryed.

Regards,
Zanga

[Francesco Molino]

Can you share what you've done so far and show where you're getting the syntax error.
This WE is a long weekend in Canada but I'm going to do my best to answer soon.