How to access APIs and logs ?

Solved
vdahiya
Comes here often

How to access APIs and logs ?

Hi, I’m working on an integration for which I have the following queries, I would really appreciate if someone could help me to answer these queries:
  1. I am looking for Firewall details on the Cisco Meraki website, Event Log, Firewall API  but I could not locate them anywhere. Could someone confirm if Meraki Firewall capture Firewall logs? If yes, then is there any web API using which we can fetch these details, also it would be nice if anyone can guide us on how to setup this API
  2. Also is it necessary to create a free account to access this information if available?
1 Accepted Solution
sungod
Head in the Cloud

The getNetworkEvents call can get you L7 blocks and content/security blocks for a specified network. Note that L3 firewall hits aren't available from this call.

 

There are a lot of event types, you probably will want to fetch only those of interest, you can get the list of possible event types using the getNetworkEventsEventTypes call, then choose the ones you want to use to filter results from the getNetworkEvents call, fwiw I use these filters...

 

productType="appliance", includedEventTypes = ["nbar_block", "cf_block", "sf_url_block", "sf_binary_block"]

 

There is also getNetworkApplianceSecurityEvents which gets some other classes of events, I suggest run it for a while to see what you get that you want to include.

 

For L3 firewall events, you can get them via syslog... https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Syslog_Event_Types_...

 

 

 

View solution in original post

3 Replies 3
alemabrahao
Kind of a big deal
Kind of a big deal

Yes, you need to create a Dashboard Account.

 

https://documentation.meraki.com/General_Administration/Organizations_and_Networks/Creating_a_Dashbo...

 

 

You can find more information on Meraki’s APIs on their dedicated API documentation website.

 

https://developer.cisco.com/meraki/api/

 

 

 

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.

Hi , I have already created account on Meraki Dashboard (free trial)  but still not able to access the APIs and logs related to the Firewall .I am working on the Integration part , So it will be really helpful for me .Kindly Please help me.

sungod
Head in the Cloud

The getNetworkEvents call can get you L7 blocks and content/security blocks for a specified network. Note that L3 firewall hits aren't available from this call.

 

There are a lot of event types, you probably will want to fetch only those of interest, you can get the list of possible event types using the getNetworkEventsEventTypes call, then choose the ones you want to use to filter results from the getNetworkEvents call, fwiw I use these filters...

 

productType="appliance", includedEventTypes = ["nbar_block", "cf_block", "sf_url_block", "sf_binary_block"]

 

There is also getNetworkApplianceSecurityEvents which gets some other classes of events, I suggest run it for a while to see what you get that you want to include.

 

For L3 firewall events, you can get them via syslog... https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Syslog_Event_Types_...

 

 

 

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.