Run Operational Mode Commands (API)

Use any of the operational mode commands available on the command line interface with the following API request:
https://
<firewall>
/api/?type=op&cmd=<xml-body>
Use the API Browser to explore operational mode commands and a complete listing of all the options available for the
xml-body
and their corresponding operation.
Some requests operational mode commands, including download, upgrade, and installation requests, are asynchronous, meaning they require more than one request to get final results. Learn more about Asynchronous and Synchronous Requests to the PAN-OS XML API.
Operational Command
API Request
System restart.
https://
<firewall>
/api/?type=op&cmd=<request><restart><system></system></restart></request>
System software version installation.
https://
<firewall>
/api/?type=op&cmd=<request><system><software><install><version>version_number</version></install></software></system></request>
Multi-vsys mode.
https://
<firewall>
/api/?type=op&cmd=<set><system><setting><multi-vsys></multi-vsys></setting></system></set>
User Activity Report scheduling.
https://
<firewall>
/api/?type=op&cmd=<schedule><uar-report><user>username</user><title>titlename</title></uar-report></schedule>
Detailed information on applications and threats from the firewall.
https://
<firewall>
/api/?type=op&cmd=<show><predefined><xpath>/predefined/threats/vulnerability/entry[@name='30003']</xpath></predefined></show>
Only PAN-OS 8.0.4 and later releases support this API call.
Full configuration validation.
https://
<firewall>
/api/?type=op&cmd=<validate><full></full></validate>
Partial configuration validation.
https://
<firewall>
/api/?type=op&cmd=<validate><partial><device-and-network>excluded</device-and-network></partial></validate>
Configuration saving.
https://
<firewall>
/api/?type=op&cmd=<save><config><to>filename</to></config></save>
Configuration loading.
https://
<firewall>
/api/?type=op&cmd=<load><config><from>filename</from></config></load>
Partial revert of admin-level changes for a candidate configuration on a firewall.
https://
<firewall>
/api/?type=op&cmd=<revert><config><partial><admin><member>admin-name</member></admin></partial></config></revert>
Partial revert of admin-level changes to Panorama by a specific administrator within a specific device group
https://
<panorama>
/api/?type=op&cmd=<revert><config><partial><admin><member><admin-name></member></admin><device-group><member><device-group-name></member></device-group><no-template/><no-template-stack/><no-log-collector-group/><no-log-collector/><device-and-network>excluded</device-and-network></partial></config></revert>
Base64-encoded metadata of a SAML authentication profile.
https://
<firewall>
/api/?type=op&cmd=<show><sp-metadata><management><authprofile><SAML-auth-profile-name></authprofile></management></sp-metadata></show>
Summary of changes between the active and candidate configuration.
https://
<firewall>
/api/?type=op&cmd=<show><config><list><change-summary/></list></config></show>
Commit locks
https://
<firewall>
/api/?key=<apikey>&type=op&cmd=<show><commit-locks/></show>
Show WildFire appliances connected to Panorama.
https://
<panorama>
/api/?key=<apikey>&&type=op&cmd=<show><wildfire-appliance><connected></connected></wildfire-appliance></show>
System summary about WildFire appliances or WildFire clusters.
  • WildFire Appliance
    :
    https://
    <panorama>
    /api/?key=<apikey>&&type=op&cmd=<show><wildfire-appliance><all></all></wildfire-appliance></show>
  • WildFire Cluster:
    https://
    <panorama>
    /api/?key=<apikey>&&type=op&cmd=<show><wildfire-appliance-cluster><all></all></wildfire-appliance-cluster></show>
Generate a list of Firewalls connected and sending data to a WildFire appliance or WildFire cluster.
  • WildFire Appliance:
    https://
    <panorama>
    /api/?key=<apikey>&&type=op&cmd=<show><wildfire-appliance><devices-reporting-data><serial-number>
    <serial_number>
    </serial-number></devices-reporting-data></wildfire-appliance></show>
  • WildFire Cluster:
    https://
    <panorama>
    /api/?key=<apikey>&&type=op&cmd=<show><wildfire-appliance-cluster><devices-reporting-data><name><cluster_name></name></devices-reporting-data></wildfire-appliance-cluster></show>
Display configuration details about a specified WildFire appliance or WildFire cluster.
  • WildFire Appliance:
    https://
    <panorama>
    /api/?key=<apikey>&&type=op&cmd=<show><wildfire-appliance><info><serial-number>
    <serial_number>
    </serial-number></info></wildfire-appliance></show>
  • WildFire Cluster:
    https://
    <panorama>
    /api/?key=<apikey>&&type=op&cmd=<show><wildfire-appliance-cluster><info><name><cluster_name></name></info></wildfire-appliance-cluster></show>
Display registration activity for a specified WildFire appliance or WildFire cluster.
  • WildFire Appliance:
    https://
    <panorama>
    /api/?key=<apikey>&&type=op&cmd=<show><wildfire-appliance><last-device-registration><all><serial-number>
    <serial_number>
    </serial-number></all></last-device-registration></wildfire-appliance></show>
  • WildFire Cluster:
    https://
    <panorama>
    /api/?key=<apikey>&&type=op&cmd=<show><wildfire-appliance-cluster><last-device-registration><all><name><cluster_name></name></all></last-device-registration></wildfire-appliance-cluster></show>
Display statistics for a specified WildFire appliance or WildFire cluster.
  • WildFire Appliance:
    https://
    <panorama>
    /api/?key=<apikey>&&type=op&cmd=<show><wildfire-appliance><statistics><days><days_up_to_31></days><type><all_or_file_or_general></type><serial-number>
    <serial_number>
    </name></statistics></wildfire-appliance></show>
  • WildFire Cluster:
    https://
    <panorama>
    /api/?key=<apikey>&&type=op&cmd=<show><wildfire-appliance-cluster><statistics><hours><hours_up_to_24></minutes><type><all_or_file_or_general></type><name><cluster_name></name></statistics></wildfire-appliance-cluster></show>
Display a list of supported VM images on the specified WildFire appliance.
https://
<panorama>
/api/?key=<apikey>&&type=op&cmd=<show><wildfire-appliance><vm-images><serial-number>
<serial_number>
</serial-number></vm-images></wildfire-appliance></show>

Related Documentation