catocli 1.0.19__py3-none-any.whl → 1.0.21__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of catocli might be problematic. Click here for more details.
- catocli/Utils/clidriver.py +6 -0
- catocli/__init__.py +1 -1
- catocli/parsers/custom/__init__.py +1 -1
- catocli/parsers/mutation_admin_addAdmin/README.md +1 -1
- catocli/parsers/mutation_admin_updateAdmin/README.md +1 -1
- catocli/parsers/mutation_policy/__init__.py +522 -0
- catocli/parsers/mutation_policy_dynamicIpAllocation/README.md +7 -0
- catocli/parsers/mutation_policy_dynamicIpAllocation_addRule/README.md +18 -0
- catocli/parsers/mutation_policy_dynamicIpAllocation_addSection/README.md +18 -0
- catocli/parsers/mutation_policy_dynamicIpAllocation_createPolicyRevision/README.md +18 -0
- catocli/parsers/mutation_policy_dynamicIpAllocation_discardPolicyRevision/README.md +18 -0
- catocli/parsers/mutation_policy_dynamicIpAllocation_moveRule/README.md +18 -0
- catocli/parsers/mutation_policy_dynamicIpAllocation_moveSection/README.md +18 -0
- catocli/parsers/mutation_policy_dynamicIpAllocation_publishPolicyRevision/README.md +18 -0
- catocli/parsers/mutation_policy_dynamicIpAllocation_removeRule/README.md +18 -0
- catocli/parsers/mutation_policy_dynamicIpAllocation_removeSection/README.md +18 -0
- catocli/parsers/mutation_policy_dynamicIpAllocation_updatePolicy/README.md +18 -0
- catocli/parsers/mutation_policy_dynamicIpAllocation_updateRule/README.md +18 -0
- catocli/parsers/mutation_policy_dynamicIpAllocation_updateSection/README.md +18 -0
- catocli/parsers/mutation_policy_internetFirewall_addRule/README.md +1 -1
- catocli/parsers/mutation_policy_internetFirewall_updateRule/README.md +1 -1
- catocli/parsers/mutation_policy_socketLan/README.md +7 -0
- catocli/parsers/mutation_policy_socketLan_addRule/README.md +18 -0
- catocli/parsers/mutation_policy_socketLan_addSection/README.md +18 -0
- catocli/parsers/mutation_policy_socketLan_createPolicyRevision/README.md +18 -0
- catocli/parsers/mutation_policy_socketLan_discardPolicyRevision/README.md +18 -0
- catocli/parsers/mutation_policy_socketLan_moveRule/README.md +18 -0
- catocli/parsers/mutation_policy_socketLan_moveSection/README.md +18 -0
- catocli/parsers/mutation_policy_socketLan_publishPolicyRevision/README.md +18 -0
- catocli/parsers/mutation_policy_socketLan_removeRule/README.md +18 -0
- catocli/parsers/mutation_policy_socketLan_removeSection/README.md +18 -0
- catocli/parsers/mutation_policy_socketLan_updatePolicy/README.md +18 -0
- catocli/parsers/mutation_policy_socketLan_updateRule/README.md +18 -0
- catocli/parsers/mutation_policy_socketLan_updateSection/README.md +18 -0
- catocli/parsers/mutation_policy_wanNetwork/README.md +7 -0
- catocli/parsers/mutation_policy_wanNetwork_addRule/README.md +18 -0
- catocli/parsers/mutation_policy_wanNetwork_addSection/README.md +18 -0
- catocli/parsers/mutation_policy_wanNetwork_createPolicyRevision/README.md +18 -0
- catocli/parsers/mutation_policy_wanNetwork_discardPolicyRevision/README.md +18 -0
- catocli/parsers/mutation_policy_wanNetwork_moveRule/README.md +18 -0
- catocli/parsers/mutation_policy_wanNetwork_moveSection/README.md +18 -0
- catocli/parsers/mutation_policy_wanNetwork_publishPolicyRevision/README.md +18 -0
- catocli/parsers/mutation_policy_wanNetwork_removeRule/README.md +18 -0
- catocli/parsers/mutation_policy_wanNetwork_removeSection/README.md +18 -0
- catocli/parsers/mutation_policy_wanNetwork_updatePolicy/README.md +18 -0
- catocli/parsers/mutation_policy_wanNetwork_updateRule/README.md +18 -0
- catocli/parsers/mutation_policy_wanNetwork_updateSection/README.md +18 -0
- catocli/parsers/mutation_sandbox/README.md +7 -0
- catocli/parsers/mutation_sandbox/__init__.py +37 -0
- catocli/parsers/mutation_sandbox_deleteReport/README.md +17 -0
- catocli/parsers/mutation_sandbox_uploadFile/README.md +17 -0
- catocli/parsers/mutation_site/__init__.py +28 -0
- catocli/parsers/mutation_site_addIpsecIkeV2Site/README.md +1 -1
- catocli/parsers/mutation_site_addIpsecIkeV2SiteTunnels/README.md +1 -1
- catocli/parsers/mutation_site_addSecondaryAwsVSocket/README.md +17 -0
- catocli/parsers/mutation_site_addSecondaryAzureVSocket/README.md +17 -0
- catocli/parsers/mutation_site_addSocketSite/README.md +1 -1
- catocli/parsers/mutation_site_updateIpsecIkeV2SiteTunnels/README.md +1 -1
- catocli/parsers/mutation_site_updateSocketInterface/README.md +1 -1
- catocli/parsers/mutation_sites/__init__.py +28 -0
- catocli/parsers/mutation_sites_addIpsecIkeV2Site/README.md +1 -1
- catocli/parsers/mutation_sites_addIpsecIkeV2SiteTunnels/README.md +1 -1
- catocli/parsers/mutation_sites_addSecondaryAwsVSocket/README.md +17 -0
- catocli/parsers/mutation_sites_addSecondaryAzureVSocket/README.md +17 -0
- catocli/parsers/mutation_sites_addSocketSite/README.md +1 -1
- catocli/parsers/mutation_sites_updateIpsecIkeV2SiteTunnels/README.md +1 -1
- catocli/parsers/mutation_sites_updateSocketInterface/README.md +1 -1
- catocli/parsers/mutation_xdr/README.md +7 -0
- catocli/parsers/mutation_xdr/__init__.py +51 -0
- catocli/parsers/mutation_xdr_addStoryComment/README.md +17 -0
- catocli/parsers/mutation_xdr_analystFeedback/README.md +18 -0
- catocli/parsers/mutation_xdr_deleteStoryComment/README.md +17 -0
- catocli/parsers/query_accountMetrics/README.md +2 -1
- catocli/parsers/query_appStatsTimeSeries/README.md +2 -1
- catocli/parsers/query_eventsFeed/README.md +1 -1
- catocli/parsers/query_eventsTimeSeries/README.md +2 -1
- catocli/parsers/query_policy/README.md +4 -1
- catocli/parsers/query_sandbox/README.md +17 -0
- catocli/parsers/query_sandbox/__init__.py +17 -0
- catocli/parsers/query_siteLocation/README.md +1 -1
- catocli/parsers/query_xdr_story/README.md +1 -1
- {catocli-1.0.19.dist-info → catocli-1.0.21.dist-info}/METADATA +1 -1
- {catocli-1.0.19.dist-info → catocli-1.0.21.dist-info}/RECORD +166 -66
- models/mutation.admin.addAdmin.json +0 -60
- models/mutation.admin.updateAdmin.json +0 -57
- models/mutation.policy.dynamicIpAllocation.addRule.json +3696 -0
- models/mutation.policy.dynamicIpAllocation.addSection.json +1358 -0
- models/mutation.policy.dynamicIpAllocation.createPolicyRevision.json +2175 -0
- models/mutation.policy.dynamicIpAllocation.discardPolicyRevision.json +2109 -0
- models/mutation.policy.dynamicIpAllocation.moveRule.json +1907 -0
- models/mutation.policy.dynamicIpAllocation.moveSection.json +1259 -0
- models/mutation.policy.dynamicIpAllocation.publishPolicyRevision.json +2166 -0
- models/mutation.policy.dynamicIpAllocation.removeRule.json +1555 -0
- models/mutation.policy.dynamicIpAllocation.removeSection.json +958 -0
- models/mutation.policy.dynamicIpAllocation.updatePolicy.json +2185 -0
- models/mutation.policy.dynamicIpAllocation.updateRule.json +3374 -0
- models/mutation.policy.dynamicIpAllocation.updateSection.json +1111 -0
- models/mutation.policy.internetFirewall.addRule.json +18 -18
- models/mutation.policy.internetFirewall.createPolicyRevision.json +4 -4
- models/mutation.policy.internetFirewall.discardPolicyRevision.json +4 -4
- models/mutation.policy.internetFirewall.moveRule.json +4 -4
- models/mutation.policy.internetFirewall.publishPolicyRevision.json +4 -4
- models/mutation.policy.internetFirewall.removeRule.json +4 -4
- models/mutation.policy.internetFirewall.updatePolicy.json +4 -4
- models/mutation.policy.internetFirewall.updateRule.json +18 -18
- models/mutation.policy.socketLan.addRule.json +11266 -0
- models/mutation.policy.socketLan.addSection.json +1358 -0
- models/mutation.policy.socketLan.createPolicyRevision.json +3926 -0
- models/mutation.policy.socketLan.discardPolicyRevision.json +3860 -0
- models/mutation.policy.socketLan.moveRule.json +3658 -0
- models/mutation.policy.socketLan.moveSection.json +1259 -0
- models/mutation.policy.socketLan.publishPolicyRevision.json +3917 -0
- models/mutation.policy.socketLan.removeRule.json +3306 -0
- models/mutation.policy.socketLan.removeSection.json +958 -0
- models/mutation.policy.socketLan.updatePolicy.json +3936 -0
- models/mutation.policy.socketLan.updateRule.json +10860 -0
- models/mutation.policy.socketLan.updateSection.json +1111 -0
- models/mutation.policy.wanNetwork.addRule.json +30614 -0
- models/mutation.policy.wanNetwork.addSection.json +1358 -0
- models/mutation.policy.wanNetwork.createPolicyRevision.json +8251 -0
- models/mutation.policy.wanNetwork.discardPolicyRevision.json +8185 -0
- models/mutation.policy.wanNetwork.moveRule.json +7983 -0
- models/mutation.policy.wanNetwork.moveSection.json +1259 -0
- models/mutation.policy.wanNetwork.publishPolicyRevision.json +8242 -0
- models/mutation.policy.wanNetwork.removeRule.json +7631 -0
- models/mutation.policy.wanNetwork.removeSection.json +958 -0
- models/mutation.policy.wanNetwork.updatePolicy.json +8261 -0
- models/mutation.policy.wanNetwork.updateRule.json +30145 -0
- models/mutation.policy.wanNetwork.updateSection.json +1111 -0
- models/mutation.sandbox.deleteReport.json +302 -0
- models/mutation.sandbox.uploadFile.json +301 -0
- models/mutation.site.addIpsecIkeV2Site.json +57 -0
- models/mutation.site.addIpsecIkeV2SiteTunnels.json +222 -0
- models/mutation.site.addSecondaryAwsVSocket.json +707 -0
- models/mutation.site.addSecondaryAzureVSocket.json +647 -0
- models/mutation.site.addSocketSite.json +72 -15
- models/mutation.site.updateIpsecIkeV2SiteTunnels.json +222 -0
- models/mutation.site.updateNetworkRange.json +3 -3
- models/mutation.site.updateSocketInterface.json +126 -18
- models/mutation.sites.addIpsecIkeV2Site.json +57 -0
- models/mutation.sites.addIpsecIkeV2SiteTunnels.json +222 -0
- models/mutation.sites.addSecondaryAwsVSocket.json +707 -0
- models/mutation.sites.addSecondaryAzureVSocket.json +647 -0
- models/mutation.sites.addSocketSite.json +72 -15
- models/mutation.sites.updateIpsecIkeV2SiteTunnels.json +222 -0
- models/mutation.sites.updateNetworkRange.json +3 -3
- models/mutation.sites.updateSocketInterface.json +126 -18
- models/mutation.xdr.addStoryComment.json +622 -0
- models/mutation.xdr.analystFeedback.json +28820 -0
- models/mutation.xdr.deleteStoryComment.json +622 -0
- models/query.accountMetrics.json +592 -0
- models/query.accountSnapshot.json +308 -0
- models/query.appStatsTimeSeries.json +37 -0
- models/query.auditFeed.json +352 -52
- models/query.events.json +1434 -234
- models/query.eventsFeed.json +352 -52
- models/query.eventsTimeSeries.json +1113 -176
- models/query.policy.json +22867 -9389
- models/query.sandbox.json +2111 -0
- models/query.xdr.stories.json +134 -4
- models/query.xdr.story.json +116 -4
- schema/catolib.py +4 -5
- {catocli-1.0.19.dist-info → catocli-1.0.21.dist-info}/LICENSE +0 -0
- {catocli-1.0.19.dist-info → catocli-1.0.21.dist-info}/WHEEL +0 -0
- {catocli-1.0.19.dist-info → catocli-1.0.21.dist-info}/entry_points.txt +0 -0
- {catocli-1.0.19.dist-info → catocli-1.0.21.dist-info}/top_level.txt +0 -0
|
@@ -10,7 +10,7 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli mutation sites addIpsecIkeV2Site "$(cat < addIpsecIkeV2Site.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli mutation sites addIpsecIkeV2Site '{"addIpsecIkeV2SiteInput": {"addSiteLocationInput": {"address": {"address": "String"}, "city": {"city": "String"}, "countryCode": {"countryCode": "String"}, "stateCode": {"stateCode": "String"}, "timezone": {"timezone": "String"}}, "description": {"description": "String"}, "name": {"name": "String"}, "nativeNetworkRange": {"nativeNetworkRange": "IPSubnet"}, "siteType": {"siteType": "enum(SiteType)"}}}'`
|
|
13
|
+
`catocli mutation sites addIpsecIkeV2Site '{"addIpsecIkeV2SiteInput": {"addSiteLocationInput": {"address": {"address": "String"}, "city": {"city": "String"}, "countryCode": {"countryCode": "String"}, "stateCode": {"stateCode": "String"}, "timezone": {"timezone": "String"}}, "description": {"description": "String"}, "name": {"name": "String"}, "nativeNetworkRange": {"nativeNetworkRange": "IPSubnet"}, "siteType": {"siteType": "enum(SiteType)"}, "vlan": {"vlan": "Vlan"}}}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for mutation.sites.addIpsecIkeV2Site ####
|
|
16
16
|
`accountId` [ID] - (required) N/A
|
|
@@ -10,7 +10,7 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli mutation sites addIpsecIkeV2SiteTunnels "$(cat < addIpsecIkeV2SiteTunnels.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli mutation sites addIpsecIkeV2SiteTunnels '{"addIpsecIkeV2SiteTunnelsInput": {"addIpsecIkeV2TunnelsInput": {"destinationType": {"destinationType": "enum(DestinationType)"}, "popLocationId": {"popLocationId": "ID"}, "publicCatoIpId": {"publicCatoIpId": "ID"}, "tunnels": {"lastMileBw": {"downstream": {"downstream": "Int"}, "upstream": {"upstream": "Int"}}, "name": {"name": "String"}, "privateCatoIp": {"privateCatoIp": "IPAddress"}, "privateSiteIp": {"privateSiteIp": "IPAddress"}, "psk": {"psk": "String"}, "publicSiteIp": {"publicSiteIp": "IPAddress"}, "role": {"role": "enum(IPSecV2TunnelRole)"}}}}, "siteId": "ID"}'`
|
|
13
|
+
`catocli mutation sites addIpsecIkeV2SiteTunnels '{"addIpsecIkeV2SiteTunnelsInput": {"addIpsecIkeV2TunnelsInput": {"destinationType": {"destinationType": "enum(DestinationType)"}, "popLocationId": {"popLocationId": "ID"}, "publicCatoIpId": {"publicCatoIpId": "ID"}, "tunnels": {"lastMileBw": {"downstream": {"downstream": "Int"}, "downstreamMbpsPrecision": {"downstreamMbpsPrecision": "Float"}, "upstream": {"upstream": "Int"}, "upstreamMbpsPrecision": {"upstreamMbpsPrecision": "Float"}}, "name": {"name": "String"}, "privateCatoIp": {"privateCatoIp": "IPAddress"}, "privateSiteIp": {"privateSiteIp": "IPAddress"}, "psk": {"psk": "String"}, "publicSiteIp": {"publicSiteIp": "IPAddress"}, "role": {"role": "enum(IPSecV2TunnelRole)"}}}}, "siteId": "ID"}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for mutation.sites.addIpsecIkeV2SiteTunnels ####
|
|
16
16
|
`accountId` [ID] - (required) N/A
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
|
|
2
|
+
## CATO-CLI - mutation.sites.addSecondaryAwsVSocket:
|
|
3
|
+
[Click here](https://api.catonetworks.com/documentation/#mutation-addSecondaryAwsVSocket) for documentation on this operation.
|
|
4
|
+
|
|
5
|
+
### Usage for mutation.sites.addSecondaryAwsVSocket:
|
|
6
|
+
|
|
7
|
+
`catocli mutation sites addSecondaryAwsVSocket -h`
|
|
8
|
+
|
|
9
|
+
`catocli mutation sites addSecondaryAwsVSocket <json>`
|
|
10
|
+
|
|
11
|
+
`catocli mutation sites addSecondaryAwsVSocket "$(cat < addSecondaryAwsVSocket.json)"`
|
|
12
|
+
|
|
13
|
+
`catocli mutation sites addSecondaryAwsVSocket '{"addSecondaryAwsVSocketInput": {"eniIpAddress": {"eniIpAddress": "IPAddress"}, "eniIpSubnet": {"eniIpSubnet": "NetworkSubnet"}, "routeTableId": {"routeTableId": "String"}, "siteRefInput": {"by": {"by": "enum(ObjectRefBy)"}, "input": {"input": "String"}}}}'`
|
|
14
|
+
|
|
15
|
+
#### Operation Arguments for mutation.sites.addSecondaryAwsVSocket ####
|
|
16
|
+
`accountId` [ID] - (required) N/A
|
|
17
|
+
`addSecondaryAwsVSocketInput` [AddSecondaryAwsVSocketInput] - (required) N/A
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
|
|
2
|
+
## CATO-CLI - mutation.sites.addSecondaryAzureVSocket:
|
|
3
|
+
[Click here](https://api.catonetworks.com/documentation/#mutation-addSecondaryAzureVSocket) for documentation on this operation.
|
|
4
|
+
|
|
5
|
+
### Usage for mutation.sites.addSecondaryAzureVSocket:
|
|
6
|
+
|
|
7
|
+
`catocli mutation sites addSecondaryAzureVSocket -h`
|
|
8
|
+
|
|
9
|
+
`catocli mutation sites addSecondaryAzureVSocket <json>`
|
|
10
|
+
|
|
11
|
+
`catocli mutation sites addSecondaryAzureVSocket "$(cat < addSecondaryAzureVSocket.json)"`
|
|
12
|
+
|
|
13
|
+
`catocli mutation sites addSecondaryAzureVSocket '{"addSecondaryAzureVSocketInput": {"floatingIp": {"floatingIp": "IPAddress"}, "interfaceIp": {"interfaceIp": "IPAddress"}, "siteRefInput": {"by": {"by": "enum(ObjectRefBy)"}, "input": {"input": "String"}}}}'`
|
|
14
|
+
|
|
15
|
+
#### Operation Arguments for mutation.sites.addSecondaryAzureVSocket ####
|
|
16
|
+
`accountId` [ID] - (required) N/A
|
|
17
|
+
`addSecondaryAzureVSocketInput` [AddSecondaryAzureVSocketInput] - (required) N/A
|
|
@@ -10,7 +10,7 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli mutation sites addSocketSite "$(cat < addSocketSite.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli mutation sites addSocketSite '{"addSocketSiteInput": {"addSiteLocationInput": {"address": {"address": "String"}, "city": {"city": "String"}, "countryCode": {"countryCode": "String"}, "stateCode": {"stateCode": "String"}, "timezone": {"timezone": "String"}}, "connectionType": {"connectionType": "enum(SiteConnectionTypeEnum)"}, "description": {"description": "String"}, "name": {"name": "String"}, "nativeNetworkRange": {"nativeNetworkRange": "IPSubnet"}, "siteType": {"siteType": "enum(SiteType)"}, "translatedSubnet": {"translatedSubnet": "IPSubnet"}}}'`
|
|
13
|
+
`catocli mutation sites addSocketSite '{"addSocketSiteInput": {"addSiteLocationInput": {"address": {"address": "String"}, "city": {"city": "String"}, "countryCode": {"countryCode": "String"}, "stateCode": {"stateCode": "String"}, "timezone": {"timezone": "String"}}, "connectionType": {"connectionType": "enum(SiteConnectionTypeEnum)"}, "description": {"description": "String"}, "name": {"name": "String"}, "nativeNetworkRange": {"nativeNetworkRange": "IPSubnet"}, "siteType": {"siteType": "enum(SiteType)"}, "translatedSubnet": {"translatedSubnet": "IPSubnet"}, "vlan": {"vlan": "Vlan"}}}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for mutation.sites.addSocketSite ####
|
|
16
16
|
`accountId` [ID] - (required) N/A
|
|
@@ -10,7 +10,7 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli mutation sites updateIpsecIkeV2SiteTunnels "$(cat < updateIpsecIkeV2SiteTunnels.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli mutation sites updateIpsecIkeV2SiteTunnels '{"siteId": "ID", "updateIpsecIkeV2SiteTunnelsInput": {"updateIpsecIkeV2TunnelsInput": {"destinationType": {"destinationType": "enum(DestinationType)"}, "popLocationId": {"popLocationId": "ID"}, "publicCatoIpId": {"publicCatoIpId": "ID"}, "tunnels": {"lastMileBw": {"downstream": {"downstream": "Int"}, "upstream": {"upstream": "Int"}}, "name": {"name": "String"}, "privateCatoIp": {"privateCatoIp": "IPAddress"}, "privateSiteIp": {"privateSiteIp": "IPAddress"}, "psk": {"psk": "String"}, "publicSiteIp": {"publicSiteIp": "IPAddress"}, "role": {"role": "enum(IPSecV2TunnelRole)"}, "tunnelId": {"tunnelId": "enum(IPSecV2InterfaceId)"}}}}}'`
|
|
13
|
+
`catocli mutation sites updateIpsecIkeV2SiteTunnels '{"siteId": "ID", "updateIpsecIkeV2SiteTunnelsInput": {"updateIpsecIkeV2TunnelsInput": {"destinationType": {"destinationType": "enum(DestinationType)"}, "popLocationId": {"popLocationId": "ID"}, "publicCatoIpId": {"publicCatoIpId": "ID"}, "tunnels": {"lastMileBw": {"downstream": {"downstream": "Int"}, "downstreamMbpsPrecision": {"downstreamMbpsPrecision": "Float"}, "upstream": {"upstream": "Int"}, "upstreamMbpsPrecision": {"upstreamMbpsPrecision": "Float"}}, "name": {"name": "String"}, "privateCatoIp": {"privateCatoIp": "IPAddress"}, "privateSiteIp": {"privateSiteIp": "IPAddress"}, "psk": {"psk": "String"}, "publicSiteIp": {"publicSiteIp": "IPAddress"}, "role": {"role": "enum(IPSecV2TunnelRole)"}, "tunnelId": {"tunnelId": "enum(IPSecV2InterfaceId)"}}}}}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for mutation.sites.updateIpsecIkeV2SiteTunnels ####
|
|
16
16
|
`accountId` [ID] - (required) N/A
|
|
@@ -10,7 +10,7 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli mutation sites updateSocketInterface "$(cat < updateSocketInterface.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli mutation sites updateSocketInterface '{"siteId": "ID", "socketInterfaceId": "enum(SocketInterfaceIDEnum)", "updateSocketInterfaceInput": {"destType": {"destType": "enum(SocketInterfaceDestType)"}, "name": {"name": "String"}, "socketInterfaceAltWanInput": {"privateGatewayIp": {"privateGatewayIp": "IPAddress"}, "privateInterfaceIp": {"privateInterfaceIp": "IPAddress"}, "privateNetwork": {"privateNetwork": "IPSubnet"}, "privateVlanTag": {"privateVlanTag": "Int"}, "publicGatewayIp": {"publicGatewayIp": "IPAddress"}, "publicInterfaceIp": {"publicInterfaceIp": "IPAddress"}, "publicNetwork": {"publicNetwork": "IPSubnet"}, "publicVlanTag": {"publicVlanTag": "Int"}}, "socketInterfaceBandwidthInput": {"downstreamBandwidth": {"downstreamBandwidth": "Int"}, "upstreamBandwidth": {"upstreamBandwidth": "Int"}}, "socketInterfaceLagInput": {"minLinks": {"minLinks": "Int"}}, "socketInterfaceLanInput": {"localIp": {"localIp": "IPAddress"}, "subnet": {"subnet": "IPSubnet"}, "translatedSubnet": {"translatedSubnet": "IPSubnet"}}, "socketInterfaceOffCloudInput": {"enabled": {"enabled": "Boolean"}, "publicIp": {"publicIp": "IPAddress"}, "publicStaticPort": {"publicStaticPort": "Int"}}, "socketInterfaceVrrpInput": {"vrrpType": {"vrrpType": "enum(VrrpType)"}}, "socketInterfaceWanInput": {"precedence": {"precedence": "enum(SocketInterfacePrecedenceEnum)"}, "role": {"role": "enum(SocketInterfaceRole)"}}}}'`
|
|
13
|
+
`catocli mutation sites updateSocketInterface '{"siteId": "ID", "socketInterfaceId": "enum(SocketInterfaceIDEnum)", "updateSocketInterfaceInput": {"destType": {"destType": "enum(SocketInterfaceDestType)"}, "name": {"name": "String"}, "socketInterfaceAltWanInput": {"privateGatewayIp": {"privateGatewayIp": "IPAddress"}, "privateInterfaceIp": {"privateInterfaceIp": "IPAddress"}, "privateNetwork": {"privateNetwork": "IPSubnet"}, "privateVlanTag": {"privateVlanTag": "Int"}, "publicGatewayIp": {"publicGatewayIp": "IPAddress"}, "publicInterfaceIp": {"publicInterfaceIp": "IPAddress"}, "publicNetwork": {"publicNetwork": "IPSubnet"}, "publicVlanTag": {"publicVlanTag": "Int"}}, "socketInterfaceBandwidthInput": {"downstreamBandwidth": {"downstreamBandwidth": "Int"}, "downstreamBandwidthMbpsPrecision": {"downstreamBandwidthMbpsPrecision": "Float"}, "upstreamBandwidth": {"upstreamBandwidth": "Int"}, "upstreamBandwidthMbpsPrecision": {"upstreamBandwidthMbpsPrecision": "Float"}}, "socketInterfaceLagInput": {"minLinks": {"minLinks": "Int"}}, "socketInterfaceLanInput": {"localIp": {"localIp": "IPAddress"}, "subnet": {"subnet": "IPSubnet"}, "translatedSubnet": {"translatedSubnet": "IPSubnet"}}, "socketInterfaceOffCloudInput": {"enabled": {"enabled": "Boolean"}, "publicIp": {"publicIp": "IPAddress"}, "publicStaticPort": {"publicStaticPort": "Int"}}, "socketInterfaceVrrpInput": {"vrrpType": {"vrrpType": "enum(VrrpType)"}}, "socketInterfaceWanInput": {"precedence": {"precedence": "enum(SocketInterfacePrecedenceEnum)"}, "role": {"role": "enum(SocketInterfaceRole)"}}}}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for mutation.sites.updateSocketInterface ####
|
|
16
16
|
`accountId` [ID] - (required) N/A
|
|
@@ -0,0 +1,51 @@
|
|
|
1
|
+
|
|
2
|
+
from ..parserApiClient import createRequest, get_help
|
|
3
|
+
|
|
4
|
+
def mutation_xdr_parse(mutation_subparsers):
|
|
5
|
+
mutation_xdr_parser = mutation_subparsers.add_parser('xdr',
|
|
6
|
+
help='xdr() mutation operation',
|
|
7
|
+
usage=get_help("mutation_xdr"))
|
|
8
|
+
|
|
9
|
+
mutation_xdr_subparsers = mutation_xdr_parser.add_subparsers()
|
|
10
|
+
|
|
11
|
+
mutation_xdr_addStoryComment_parser = mutation_xdr_subparsers.add_parser('addStoryComment',
|
|
12
|
+
help='addStoryComment() xdr operation',
|
|
13
|
+
usage=get_help("mutation_xdr_addStoryComment"))
|
|
14
|
+
|
|
15
|
+
mutation_xdr_addStoryComment_parser.add_argument('json', help='Variables in JSON format.')
|
|
16
|
+
mutation_xdr_addStoryComment_parser.add_argument('-accountID', help='Override the CATO_ACCOUNT_ID environment variable with this value.')
|
|
17
|
+
mutation_xdr_addStoryComment_parser.add_argument('-t', const=True, default=False, nargs='?',
|
|
18
|
+
help='Print test request preview without sending api call')
|
|
19
|
+
mutation_xdr_addStoryComment_parser.add_argument('-v', const=True, default=False, nargs='?',
|
|
20
|
+
help='Verbose output')
|
|
21
|
+
mutation_xdr_addStoryComment_parser.add_argument('-p', const=True, default=False, nargs='?',
|
|
22
|
+
help='Pretty print')
|
|
23
|
+
mutation_xdr_addStoryComment_parser.set_defaults(func=createRequest,operation_name='mutation.xdr.addStoryComment')
|
|
24
|
+
|
|
25
|
+
mutation_xdr_analystFeedback_parser = mutation_xdr_subparsers.add_parser('analystFeedback',
|
|
26
|
+
help='analystFeedback() xdr operation',
|
|
27
|
+
usage=get_help("mutation_xdr_analystFeedback"))
|
|
28
|
+
|
|
29
|
+
mutation_xdr_analystFeedback_parser.add_argument('json', help='Variables in JSON format.')
|
|
30
|
+
mutation_xdr_analystFeedback_parser.add_argument('-accountID', help='Override the CATO_ACCOUNT_ID environment variable with this value.')
|
|
31
|
+
mutation_xdr_analystFeedback_parser.add_argument('-t', const=True, default=False, nargs='?',
|
|
32
|
+
help='Print test request preview without sending api call')
|
|
33
|
+
mutation_xdr_analystFeedback_parser.add_argument('-v', const=True, default=False, nargs='?',
|
|
34
|
+
help='Verbose output')
|
|
35
|
+
mutation_xdr_analystFeedback_parser.add_argument('-p', const=True, default=False, nargs='?',
|
|
36
|
+
help='Pretty print')
|
|
37
|
+
mutation_xdr_analystFeedback_parser.set_defaults(func=createRequest,operation_name='mutation.xdr.analystFeedback')
|
|
38
|
+
|
|
39
|
+
mutation_xdr_deleteStoryComment_parser = mutation_xdr_subparsers.add_parser('deleteStoryComment',
|
|
40
|
+
help='deleteStoryComment() xdr operation',
|
|
41
|
+
usage=get_help("mutation_xdr_deleteStoryComment"))
|
|
42
|
+
|
|
43
|
+
mutation_xdr_deleteStoryComment_parser.add_argument('json', help='Variables in JSON format.')
|
|
44
|
+
mutation_xdr_deleteStoryComment_parser.add_argument('-accountID', help='Override the CATO_ACCOUNT_ID environment variable with this value.')
|
|
45
|
+
mutation_xdr_deleteStoryComment_parser.add_argument('-t', const=True, default=False, nargs='?',
|
|
46
|
+
help='Print test request preview without sending api call')
|
|
47
|
+
mutation_xdr_deleteStoryComment_parser.add_argument('-v', const=True, default=False, nargs='?',
|
|
48
|
+
help='Verbose output')
|
|
49
|
+
mutation_xdr_deleteStoryComment_parser.add_argument('-p', const=True, default=False, nargs='?',
|
|
50
|
+
help='Pretty print')
|
|
51
|
+
mutation_xdr_deleteStoryComment_parser.set_defaults(func=createRequest,operation_name='mutation.xdr.deleteStoryComment')
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
|
|
2
|
+
## CATO-CLI - mutation.xdr.addStoryComment:
|
|
3
|
+
[Click here](https://api.catonetworks.com/documentation/#mutation-addStoryComment) for documentation on this operation.
|
|
4
|
+
|
|
5
|
+
### Usage for mutation.xdr.addStoryComment:
|
|
6
|
+
|
|
7
|
+
`catocli mutation xdr addStoryComment -h`
|
|
8
|
+
|
|
9
|
+
`catocli mutation xdr addStoryComment <json>`
|
|
10
|
+
|
|
11
|
+
`catocli mutation xdr addStoryComment "$(cat < addStoryComment.json)"`
|
|
12
|
+
|
|
13
|
+
`catocli mutation xdr addStoryComment '{"addStoryCommentInput": {"storyId": {"storyId": "ID"}, "text": {"text": "String"}}}'`
|
|
14
|
+
|
|
15
|
+
#### Operation Arguments for mutation.xdr.addStoryComment ####
|
|
16
|
+
`accountId` [ID] - (required) N/A
|
|
17
|
+
`addStoryCommentInput` [AddStoryCommentInput] - (required) N/A
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
|
|
2
|
+
## CATO-CLI - mutation.xdr.analystFeedback:
|
|
3
|
+
[Click here](https://api.catonetworks.com/documentation/#mutation-analystFeedback) for documentation on this operation.
|
|
4
|
+
|
|
5
|
+
### Usage for mutation.xdr.analystFeedback:
|
|
6
|
+
|
|
7
|
+
`catocli mutation xdr analystFeedback -h`
|
|
8
|
+
|
|
9
|
+
`catocli mutation xdr analystFeedback <json>`
|
|
10
|
+
|
|
11
|
+
`catocli mutation xdr analystFeedback "$(cat < analystFeedback.json)"`
|
|
12
|
+
|
|
13
|
+
`catocli mutation xdr analystFeedback '{"analystFeedbackInput": {"additionalInfo": {"additionalInfo": "String"}, "severity": {"severity": "enum(SeverityEnum)"}, "status": {"status": "enum(StoryStatusEnum)"}, "storyId": {"storyId": "ID"}, "storyThreatType": {"details": {"details": "String"}, "name": {"name": "String"}, "recommendedAction": {"recommendedAction": "String"}}, "threatClassification": {"threatClassification": "String"}, "verdict": {"verdict": "enum(StoryVerdictEnum)"}}, "perSecond": "Boolean"}'`
|
|
14
|
+
|
|
15
|
+
#### Operation Arguments for mutation.xdr.analystFeedback ####
|
|
16
|
+
`accountId` [ID] - (required) N/A
|
|
17
|
+
`analystFeedbackInput` [AnalystFeedbackInput] - (required) N/A
|
|
18
|
+
`perSecond` [Boolean] - (optional) whether to normalize the data into per second (i.e. divide by granularity)
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
|
|
2
|
+
## CATO-CLI - mutation.xdr.deleteStoryComment:
|
|
3
|
+
[Click here](https://api.catonetworks.com/documentation/#mutation-deleteStoryComment) for documentation on this operation.
|
|
4
|
+
|
|
5
|
+
### Usage for mutation.xdr.deleteStoryComment:
|
|
6
|
+
|
|
7
|
+
`catocli mutation xdr deleteStoryComment -h`
|
|
8
|
+
|
|
9
|
+
`catocli mutation xdr deleteStoryComment <json>`
|
|
10
|
+
|
|
11
|
+
`catocli mutation xdr deleteStoryComment "$(cat < deleteStoryComment.json)"`
|
|
12
|
+
|
|
13
|
+
`catocli mutation xdr deleteStoryComment '{"deleteStoryCommentInput": {"commentId": {"commentId": "ID"}, "storyId": {"storyId": "ID"}}}'`
|
|
14
|
+
|
|
15
|
+
#### Operation Arguments for mutation.xdr.deleteStoryComment ####
|
|
16
|
+
`accountId` [ID] - (required) N/A
|
|
17
|
+
`deleteStoryCommentInput` [DeleteStoryCommentInput] - (required) N/A
|
|
@@ -10,7 +10,7 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli query accountMetrics "$(cat < accountMetrics.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli query accountMetrics '{"buckets": "Int", "groupDevices": "Boolean", "groupInterfaces": "Boolean", "labels": "enum(TimeseriesMetricType)", "perSecond": "Boolean", "siteIDs": ["ID"], "timeFrame": "TimeFrame", "toRate": "Boolean", "types": ["String"], "userIDs": ["ID"], "withMissingData": "Boolean"}'`
|
|
13
|
+
`catocli query accountMetrics '{"buckets": "Int", "groupDevices": "Boolean", "groupInterfaces": "Boolean", "labels": "enum(TimeseriesMetricType)", "perSecond": "Boolean", "siteIDs": ["ID"], "timeFrame": "TimeFrame", "toRate": "Boolean", "types": ["String"], "useDefaultSizeBucket": "Boolean", "userIDs": ["ID"], "withMissingData": "Boolean"}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for query.accountMetrics ####
|
|
16
16
|
`accountID` [ID] - (optional) Unique Identifier of Account.
|
|
@@ -28,5 +28,6 @@ interfaces are aggregated to a single interface.
|
|
|
28
28
|
`timeFrame` [TimeFrame] - (required) The time frame for the data that the query returns. The argument is in the format type.time value. This argument is mandatory.
|
|
29
29
|
`toRate` [Boolean] - (optional) Normalize collected metrics as per-second values
|
|
30
30
|
`types` [String[]] - (optional) N/A
|
|
31
|
+
`useDefaultSizeBucket` [Boolean] - (optional) In case we want to have the default size bucket (from properties)
|
|
31
32
|
`userIDs` [ID[]] - (optional) A list of unique IDs for each user. If specified, only users in this list are returned. Otherwise, no user metrics are returned.
|
|
32
33
|
`withMissingData` [Boolean] - (optional) If false, the data field will be set to '0' for buckets with no reported data. Otherwise it will be set to -1
|
|
@@ -10,7 +10,7 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli query appStatsTimeSeries "$(cat < appStatsTimeSeries.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli query appStatsTimeSeries '{"appStatsFilter": {"fieldName": {"fieldName": "enum(AppStatsFieldName)"}, "operator": {"operator": "enum(FilterOperator)"}, "values": {"values": ["String"]}}, "buckets": "Int", "dimension": {"fieldName": {"fieldName": "enum(AppStatsFieldName)"}}, "measure": {"aggType": {"aggType": "enum(AggregationType)"}, "fieldName": {"fieldName": "enum(AppStatsFieldName)"}, "trend": {"trend": "Boolean"}}, "perSecond": "Boolean", "timeFrame": "TimeFrame", "withMissingData": "Boolean"}'`
|
|
13
|
+
`catocli query appStatsTimeSeries '{"appStatsFilter": {"fieldName": {"fieldName": "enum(AppStatsFieldName)"}, "operator": {"operator": "enum(FilterOperator)"}, "values": {"values": ["String"]}}, "buckets": "Int", "dimension": {"fieldName": {"fieldName": "enum(AppStatsFieldName)"}}, "measure": {"aggType": {"aggType": "enum(AggregationType)"}, "fieldName": {"fieldName": "enum(AppStatsFieldName)"}, "trend": {"trend": "Boolean"}}, "perSecond": "Boolean", "timeFrame": "TimeFrame", "useDefaultSizeBucket": "Boolean", "withMissingData": "Boolean"}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for query.appStatsTimeSeries ####
|
|
16
16
|
`accountID` [ID] - (required) Account ID
|
|
@@ -20,4 +20,5 @@
|
|
|
20
20
|
`measure` [Measure[]] - (optional) N/A
|
|
21
21
|
`perSecond` [Boolean] - (optional) whether to normalize the data into per second (i.e. divide by granularity)
|
|
22
22
|
`timeFrame` [TimeFrame] - (required) N/A
|
|
23
|
+
`useDefaultSizeBucket` [Boolean] - (optional) In case we want to have the default size bucket (from properties)
|
|
23
24
|
`withMissingData` [Boolean] - (optional) If false, the data field will be set to '0' for buckets with no reported data. Otherwise it will be set to -1
|
|
@@ -15,5 +15,5 @@
|
|
|
15
15
|
#### Operation Arguments for query.eventsFeed ####
|
|
16
16
|
`accountIDs` [ID[]] - (optional) List of Unique Account Identifiers.
|
|
17
17
|
`eventFeedFieldFilterInput` [EventFeedFieldFilterInput[]] - (optional) N/A
|
|
18
|
-
`fieldNames` [EventFieldName[]] - (optional) N/A Default Value: ['src_site', 'src_site_id', 'static_host', 'user_id', 'dest_site', 'dest_site_id', 'src_or_dest_site_id', 'rule', 'ISP_name', 'socket_interface', 'custom_category', 'directory_host_name', 'dest_port', 'bgp_peer_asn', 'user_reference_id', 'src_port', 'link_health_pkt_loss', 'pop_name', 'host_ip', 'event_message', 'src_site_name', 'domain_name', 'dest_ip', 'file_hash', 'src_isp_ip', 'authentication_type', 'rule_name', 'directory_sync_result', 'host_mac', 'threat_type', 'threat_verdict', 'device_name', 'link_type', 'login_type', 'configured_host_name', 'internalId', 'event_id', 'directory_sync_type', 'vpn_user_email', 'client_class', 'incident_aggregation', 'socket_reset', 'user_name', 'client_version', 'file_size', 'registration_code', 'bgp_error_code', 'bgp_peer_description', 'threat_name', 'qos_reported_time', 'ip_protocol', 'bgp_cato_asn', 'src_ip', 'threat_reference', 'action', 'windows_domain_name', 'risk_level', 'socket_old_version', 'link_health_latency', 'tunnel_protocol', 'socket_new_version', 'socket_version', 'link_health_jitter', 'upgrade_start_time', 'bgp_cato_ip', 'categories', 'rule_id', 'socket_role', 'targets_cardinality', 'upgrade_initiated_by', 'dest_is_site_or_vpn', 'bgp_peer_ip', 'src_is_site_or_vpn', 'ad_name', 'user_awareness_method', 'link_health_is_congested', 'subnet_name', 'os_version', 'event_sub_type', 'os_type', 'traffic_direction', 'bgp_suberror_code', 'bgp_route_cidr', 'incident_id', 'application', 'application_name', 'application_id', 'upgrade_end_time', 'socket_interface_id', 'custom_categories', 'custom_category_id', 'custom_category_name', 'src_country', 'src_country_code', 'event_count', 'file_name', 'directory_ip', 'time', 'url', 'dest_country', 'dest_country_code', 'flows_cardinality', 'dest_site_name', 'event_type', 'account_id', 'signature_id', 'client_cert_expires', 'client_cert_name', 'is_sanctioned_app', 'app_activity', 'app_activity_type', 'device_posture_profile', 'device_posture_profiles', 'full_path_url', 'application_risk', 'mitre_attack_techniques', 'mitre_attack_subtechniques', 'mitre_attack_tactics', 'indicator', 'connector_type', 'connector_name', 'connector_status', 'parent_connector_name', 'file_type', 'dlp_fail_mode', 'dlp_profiles', 'matched_data_types', 'severity', 'owner', 'collaborators', 'email_subject', 'sharing_scope', 'dns_protection_category', 'is_sinkhole', 'final_object_status', 'object_name', 'object_type', 'object_id', 'alert_id', 'vendor', 'vendor_user_id', 'status', 'classification', 'quarantine_folder_path', 'title', 'recommended_actions', 'pid', 'parent_pid', 'process_path', 'failure_reason', 'out_of_band_access', 'logged_in_user', 'http_request_method', 'xff', 'dns_query', 'key_name', 'api_type', 'api_name', 'app_stack', 'tls_rule_name', 'tls_certificate_error', 'tls_version', 'tls_error_type', 'tls_error_description', 'cato_app', 'prompt_action', 'device_id', 'visible_device_id', 'auth_method', 'bypass_method', 'bypass_duration_sec', 'bypass_reason', 'sign_in_event_types', 'tenant_id', 'tenant_name', 'user_agent', 'vendor_event_id', 'vendor_device_id', 'vendor_device_name', 'is_compliant', 'is_managed', 'trust_type', 'confidence_level', 'dlp_scan_types', 'network_access', 'analyst_verdict', 'criticality', 'indication', 'producer', 'story_id', 'raw_data', 'trigger', 'network_rule', 'congestion_algorithm', 'tcp_acceleration', 'tls_inspection', 'public_ip', 'egress_site_name', 'egress_pop_name', 'qos_priority', 'split_tunnel_configuration', 'pac_file', 'always_on_configuration', 'vpn_lan_access', 'connect_on_boot', 'trusted_networks', 'office_mode', 'device_certificate', 'tunnel_ip_protocol', 'notification_description', 'notification_api_error', 'reference_url', 'app_activity_category', 'is_admin_activity', 'is_admin', 'collaborator_name', 'dest_group_id', 'dest_group_name', 'access_method', 'vendor_collaborator_id', 'device_categories', 'device_manufacturer', 'device_model', 'device_os_type', 'device_type']
|
|
18
|
+
`fieldNames` [EventFieldName[]] - (optional) N/A Default Value: ['src_site', 'src_site_id', 'static_host', 'user_id', 'dest_site', 'dest_site_id', 'src_or_dest_site_id', 'rule', 'ISP_name', 'socket_interface', 'custom_category', 'directory_host_name', 'dest_port', 'bgp_peer_asn', 'user_reference_id', 'src_port', 'link_health_pkt_loss', 'pop_name', 'host_ip', 'event_message', 'src_site_name', 'domain_name', 'dest_ip', 'file_hash', 'src_isp_ip', 'authentication_type', 'rule_name', 'directory_sync_result', 'host_mac', 'threat_type', 'threat_verdict', 'device_name', 'link_type', 'login_type', 'configured_host_name', 'internalId', 'event_id', 'directory_sync_type', 'vpn_user_email', 'client_class', 'incident_aggregation', 'socket_reset', 'user_name', 'client_version', 'file_size', 'registration_code', 'bgp_error_code', 'bgp_peer_description', 'threat_name', 'qos_reported_time', 'ip_protocol', 'bgp_cato_asn', 'src_ip', 'threat_reference', 'action', 'windows_domain_name', 'risk_level', 'socket_old_version', 'link_health_latency', 'tunnel_protocol', 'socket_new_version', 'socket_version', 'link_health_jitter', 'upgrade_start_time', 'bgp_cato_ip', 'categories', 'rule_id', 'socket_role', 'targets_cardinality', 'upgrade_initiated_by', 'dest_is_site_or_vpn', 'bgp_peer_ip', 'src_is_site_or_vpn', 'ad_name', 'user_awareness_method', 'link_health_is_congested', 'subnet_name', 'os_version', 'event_sub_type', 'os_type', 'traffic_direction', 'bgp_suberror_code', 'bgp_route_cidr', 'incident_id', 'application', 'application_name', 'application_id', 'upgrade_end_time', 'socket_interface_id', 'custom_categories', 'custom_category_id', 'custom_category_name', 'src_country', 'src_country_code', 'event_count', 'file_name', 'directory_ip', 'time', 'url', 'dest_country', 'dest_country_code', 'flows_cardinality', 'dest_site_name', 'event_type', 'account_id', 'signature_id', 'client_cert_expires', 'client_cert_name', 'is_sanctioned_app', 'app_activity', 'app_activity_type', 'device_posture_profile', 'device_posture_profiles', 'full_path_url', 'application_risk', 'mitre_attack_techniques', 'mitre_attack_subtechniques', 'mitre_attack_tactics', 'indicator', 'connector_type', 'connector_name', 'connector_status', 'parent_connector_name', 'file_type', 'dlp_fail_mode', 'dlp_profiles', 'matched_data_types', 'severity', 'owner', 'collaborators', 'email_subject', 'sharing_scope', 'dns_protection_category', 'is_sinkhole', 'endpoint_id', 'epp_engine_type', 'file_operation', 'final_object_status', 'object_name', 'object_type', 'object_id', 'alert_id', 'vendor', 'vendor_user_id', 'status', 'classification', 'quarantine_folder_path', 'title', 'recommended_actions', 'pid', 'parent_pid', 'process_path', 'failure_reason', 'out_of_band_access', 'quarantine_uuid', 'logged_in_user', 'epp_profile', 'src_pid', 'src_process_path', 'src_process_cmdline', 'src_process_parent_pid', 'src_process_parent_path', 'dest_pid', 'dest_process_path', 'dest_process_cmdline', 'dest_process_parent_pid', 'dest_process_parent_path', 'disinfect_result', 'processes_count', 'http_request_method', 'xff', 'dns_query', 'key_name', 'api_type', 'api_name', 'app_stack', 'tls_rule_name', 'tls_certificate_error', 'tls_version', 'tls_error_type', 'tls_error_description', 'cato_app', 'prompt_action', 'device_id', 'visible_device_id', 'auth_method', 'bypass_method', 'bypass_duration_sec', 'bypass_reason', 'sign_in_event_types', 'tenant_id', 'tenant_name', 'user_agent', 'vendor_event_id', 'vendor_device_id', 'vendor_device_name', 'is_compliant', 'is_managed', 'trust_type', 'confidence_level', 'dlp_scan_types', 'network_access', 'analyst_verdict', 'criticality', 'indication', 'producer', 'story_id', 'raw_data', 'trigger', 'network_rule', 'congestion_algorithm', 'tcp_acceleration', 'tls_inspection', 'public_ip', 'egress_site_name', 'egress_pop_name', 'qos_priority', 'split_tunnel_configuration', 'pac_file', 'always_on_configuration', 'vpn_lan_access', 'connect_on_boot', 'trusted_networks', 'office_mode', 'device_certificate', 'tunnel_ip_protocol', 'notification_description', 'notification_api_error', 'reference_url', 'app_activity_category', 'is_admin_activity', 'is_admin', 'collaborator_name', 'dest_group_id', 'dest_group_name', 'access_method', 'vendor_collaborator_id', 'device_categories', 'device_manufacturer', 'device_model', 'device_os_type', 'device_type', 'tenant_restriction_rule_name', 'connection_origin', 'translated_server_ip', 'translated_client_ip', 'container_name', 'correlation_id', 'precedence', 'labels']
|
|
19
19
|
`marker` [String] - (optional) Marker to use to get results from
|
|
@@ -10,7 +10,7 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli query eventsTimeSeries "$(cat < eventsTimeSeries.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli query eventsTimeSeries '{"buckets": "Int", "eventsDimension": {"fieldName": {"fieldName": "enum(EventFieldName)"}}, "eventsFilter": {"fieldName": {"fieldName": "enum(EventFieldName)"}, "operator": {"operator": "enum(FilterOperator)"}, "values": {"values": ["String"]}}, "eventsMeasure": {"aggType": {"aggType": "enum(AggregationType)"}, "fieldName": {"fieldName": "enum(EventFieldName)"}, "trend": {"trend": "Boolean"}}, "perSecond": "Boolean", "timeFrame": "TimeFrame", "withMissingData": "Boolean"}'`
|
|
13
|
+
`catocli query eventsTimeSeries '{"buckets": "Int", "eventsDimension": {"fieldName": {"fieldName": "enum(EventFieldName)"}}, "eventsFilter": {"fieldName": {"fieldName": "enum(EventFieldName)"}, "operator": {"operator": "enum(FilterOperator)"}, "values": {"values": ["String"]}}, "eventsMeasure": {"aggType": {"aggType": "enum(AggregationType)"}, "fieldName": {"fieldName": "enum(EventFieldName)"}, "trend": {"trend": "Boolean"}}, "perSecond": "Boolean", "timeFrame": "TimeFrame", "useDefaultSizeBucket": "Boolean", "withMissingData": "Boolean"}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for query.eventsTimeSeries ####
|
|
16
16
|
`accountID` [ID] - (required) Account ID
|
|
@@ -20,4 +20,5 @@
|
|
|
20
20
|
`eventsMeasure` [EventsMeasure[]] - (optional) N/A
|
|
21
21
|
`perSecond` [Boolean] - (optional) whether to normalize the data into per second (i.e. divide by granularity)
|
|
22
22
|
`timeFrame` [TimeFrame] - (required) N/A
|
|
23
|
+
`useDefaultSizeBucket` [Boolean] - (optional) In case we want to have the default size bucket (from properties)
|
|
23
24
|
`withMissingData` [Boolean] - (optional) If false, the data field will be set to '0' for buckets with no reported data. Otherwise it will be set to -1
|
|
@@ -10,11 +10,14 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli query policy "$(cat < policy.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli query policy '{"appTenantRestrictionPolicyInput": {"policyRevisionInput": {"id": {"id": "ID"}, "type": {"type": "enum(PolicyRevisionType)"}}}, "internetFirewallPolicyInput": {"policyRevisionInput": {"id": {"id": "ID"}, "type": {"type": "enum(PolicyRevisionType)"}}}, "remotePortFwdPolicyInput": {"policyRevisionInput": {"id": {"id": "ID"}, "type": {"type": "enum(PolicyRevisionType)"}}}, "wanFirewallPolicyInput": {"policyRevisionInput": {"id": {"id": "ID"}, "type": {"type": "enum(PolicyRevisionType)"}}}}'`
|
|
13
|
+
`catocli query policy '{"appTenantRestrictionPolicyInput": {"policyRevisionInput": {"id": {"id": "ID"}, "type": {"type": "enum(PolicyRevisionType)"}}}, "dynamicIpAllocationPolicyInput": {"policyRevisionInput": {"id": {"id": "ID"}, "type": {"type": "enum(PolicyRevisionType)"}}}, "internetFirewallPolicyInput": {"policyRevisionInput": {"id": {"id": "ID"}, "type": {"type": "enum(PolicyRevisionType)"}}}, "remotePortFwdPolicyInput": {"policyRevisionInput": {"id": {"id": "ID"}, "type": {"type": "enum(PolicyRevisionType)"}}}, "socketLanPolicyInput": {"policyRevisionInput": {"id": {"id": "ID"}, "type": {"type": "enum(PolicyRevisionType)"}}}, "wanFirewallPolicyInput": {"policyRevisionInput": {"id": {"id": "ID"}, "type": {"type": "enum(PolicyRevisionType)"}}}, "wanNetworkPolicyInput": {"policyRevisionInput": {"id": {"id": "ID"}, "type": {"type": "enum(PolicyRevisionType)"}}}}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for query.policy ####
|
|
16
16
|
`accountId` [ID] - (required) N/A
|
|
17
17
|
`appTenantRestrictionPolicyInput` [AppTenantRestrictionPolicyInput] - (optional) N/A
|
|
18
|
+
`dynamicIpAllocationPolicyInput` [DynamicIpAllocationPolicyInput] - (optional) N/A
|
|
18
19
|
`internetFirewallPolicyInput` [InternetFirewallPolicyInput] - (optional) N/A
|
|
19
20
|
`remotePortFwdPolicyInput` [RemotePortFwdPolicyInput] - (optional) N/A
|
|
21
|
+
`socketLanPolicyInput` [SocketLanPolicyInput] - (optional) N/A
|
|
20
22
|
`wanFirewallPolicyInput` [WanFirewallPolicyInput] - (optional) N/A
|
|
23
|
+
`wanNetworkPolicyInput` [WanNetworkPolicyInput] - (optional) N/A
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
|
|
2
|
+
## CATO-CLI - query.sandbox:
|
|
3
|
+
[Click here](https://api.catonetworks.com/documentation/#query-sandbox) for documentation on this operation.
|
|
4
|
+
|
|
5
|
+
### Usage for query.sandbox:
|
|
6
|
+
|
|
7
|
+
`catocli query sandbox -h`
|
|
8
|
+
|
|
9
|
+
`catocli query sandbox <json>`
|
|
10
|
+
|
|
11
|
+
`catocli query sandbox "$(cat < sandbox.json)"`
|
|
12
|
+
|
|
13
|
+
`catocli query sandbox '{"sandboxReportsInput": {"pagingInput": {"from": {"from": "Int"}, "limit": {"limit": "Int"}}, "sandboxReportsFilterInput": {"fileHash": {"eq": {"eq": "String"}, "in": {"in": ["String"]}, "neq": {"neq": "String"}, "nin": {"nin": ["String"]}}, "fileName": {"eq": {"eq": "String"}, "in": {"in": ["String"]}, "neq": {"neq": "String"}, "nin": {"nin": ["String"]}}, "reportCreateDate": {"between": {"between": ["DateTime"]}, "eq": {"eq": "DateTime"}, "gt": {"gt": "DateTime"}, "gte": {"gte": "DateTime"}, "in": {"in": ["DateTime"]}, "lt": {"lt": "DateTime"}, "lte": {"lte": "DateTime"}, "neq": {"neq": "DateTime"}, "nin": {"nin": ["DateTime"]}}}, "sandboxReportsSortInput": {"fileName": {"direction": {"direction": "enum(SortOrder)"}, "priority": {"priority": "Int"}}, "reportCreateDate": {"direction": {"direction": "enum(SortOrder)"}, "priority": {"priority": "Int"}}}}}'`
|
|
14
|
+
|
|
15
|
+
#### Operation Arguments for query.sandbox ####
|
|
16
|
+
`accountId` [ID] - (required) N/A
|
|
17
|
+
`sandboxReportsInput` [SandboxReportsInput] - (optional) N/A
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
|
|
2
|
+
from ..parserApiClient import createRequest, get_help
|
|
3
|
+
|
|
4
|
+
def query_sandbox_parse(query_subparsers):
|
|
5
|
+
query_sandbox_parser = query_subparsers.add_parser('sandbox',
|
|
6
|
+
help='sandbox() query operation',
|
|
7
|
+
usage=get_help("query_sandbox"))
|
|
8
|
+
|
|
9
|
+
query_sandbox_parser.add_argument('json', help='Variables in JSON format.')
|
|
10
|
+
query_sandbox_parser.add_argument('-accountID', help='Override the CATO_ACCOUNT_ID environment variable with this value.')
|
|
11
|
+
query_sandbox_parser.add_argument('-t', const=True, default=False, nargs='?',
|
|
12
|
+
help='Print test request preview without sending api call')
|
|
13
|
+
query_sandbox_parser.add_argument('-v', const=True, default=False, nargs='?',
|
|
14
|
+
help='Verbose output')
|
|
15
|
+
query_sandbox_parser.add_argument('-p', const=True, default=False, nargs='?',
|
|
16
|
+
help='Pretty print')
|
|
17
|
+
query_sandbox_parser.set_defaults(func=createRequest,operation_name='query.sandbox')
|
|
@@ -16,7 +16,7 @@
|
|
|
16
16
|
|
|
17
17
|
`catocli query siteLocation '{"filters":[{"search": "Your stateName here","field":"stateName","operation":"endsWith"}]}'`
|
|
18
18
|
|
|
19
|
-
`catocli query siteLocation '{"filters":[{"search": "Your City here","field":"city","operation":"startsWith"},{"search": "Your StateName here","field":"stateName","operation":"endsWith"},{"search": "Your Country here","field":"countryName","operation":"contains"}}'`
|
|
19
|
+
`catocli query siteLocation '{"filters":[{"search": "Your City here","field":"city","operation":"startsWith"},{"search": "Your StateName here","field":"stateName","operation":"endsWith"},{"search": "Your Country here","field":"countryName","operation":"contains"}]}'`
|
|
20
20
|
|
|
21
21
|
#### Operation Arguments for query.siteLocation ####
|
|
22
22
|
`accountID` [ID] - (required) Unique Identifier of Account.
|
|
@@ -16,5 +16,5 @@
|
|
|
16
16
|
`accountID` [ID] - (required) N/A
|
|
17
17
|
`incidentId` [ID] - (optional) N/A
|
|
18
18
|
`perSecond` [Boolean] - (optional) whether to normalize the data into per second (i.e. divide by granularity)
|
|
19
|
-
`producer` [StoryProducerEnum] - (optional) N/A Default Value: ['AnomalyStats', 'AnomalyEvents', 'ThreatHunt', 'ThreatPrevention', 'NetworkMonitor', 'NetworkXDR', 'MicrosoftEndpointDefender', 'CatoEndpointAlert', 'EntraIdAlert']
|
|
19
|
+
`producer` [StoryProducerEnum] - (optional) N/A Default Value: ['AnomalyStats', 'AnomalyEvents', 'AnomalyExperience', 'ThreatHunt', 'ThreatPrevention', 'NetworkMonitor', 'NetworkXDR', 'MicrosoftEndpointDefender', 'CatoEndpointAlert', 'EntraIdAlert']
|
|
20
20
|
`storyId` [ID] - (optional) N/A
|