How to find list of Devices from FMC CLI

[MSJ1]

How to find list of Devices from FMC CLI. My FMC version is 6.7.0

[Marvin Rhoads · Accepted solution]

You cannot. Managed devices are stored as database objects in FMC, not lines in a config file.

[Marvin Rhoads]

I should add that you can get a list of the registered devices' IP addresses.

In the FMC cli, switch to expert mode. Then look at the sftunnel.conf file in et/sf. It will (among other things) list the peer IP addresses (but not necessarily their names).

[eugeniodesideri]

right , but while in FTD we can remove single entries on the DB by using Omniquery.pl ------------- is that possible to do the same on FMC?

eg.: mdb.sfsnort> delete from EM_peers where name = '172.16.1.240';

[Marvin Rhoads]

Theoretically you can delete just about anything by directly manipulating the database. You can also completely destroy your system and require a rebuild from scratch if you do something wrong. I would only recommend doing such manipulation with direct involvement of Cisco TAC.

[Marvin Rhoads]

I would add (thanks Wei!) that you can query the FMC database in expert mode as root user with:

OmniQuery.pl -db mdb -e "select name, ip, uuid, role from EM_peers;"

Removals can be done as well; but I would advise contacting TAC for confirmation if you believe that is necessary in your situation.

[Sheraz.Salim]

Hello @Marvin Rhoads Thanks for sharing! You’ve jogged my memory. I just need to check my notes and find a similar workaround command. Hopefully, it will be helpful to others as well. 

To work this I have to go to SFR Module find the UUID/IP but this does not work either. I have to go to FMC command line 

"root@fmc2:~# OmniQuery.pl -db mdb -e "select * from EM_peers;" against the IP/UUID. 

admin@fmc2:~$ sudo remove_peer.pl ~d2e989e8-f4bc-11eb-9fc8-9e4279a48f45