How to access APIs and logs ?

[vdahiya]

Hi, I’m working on an integration for which I have the following queries, I would really appreciate if someone could help me to answer these queries:

1. I am looking for Firewall details on the Cisco Meraki website, Event Log, Firewall API  but I could not locate them anywhere. Could someone confirm if Meraki Firewall capture Firewall logs? If yes, then is there any web API using which we can fetch these details, also it would be nice if anyone can guide us on how to setup this API
2. Also is it necessary to create a free account to access this information if available?

[alemabrahao]

Yes, you need to create a Dashboard Account.

https://documentation.meraki.com/General_Administration/Organizations_and_Networks/Creating_a_Dashbo...

You can find more information on Meraki’s APIs on their dedicated API documentation website.

https://developer.cisco.com/meraki/api/

[vdahiya]

Hi , I have already created account on Meraki Dashboard (free trial)  but still not able to access the APIs and logs related to the Firewall .I am working on the Integration part , So it will be really helpful for me .Kindly Please help me.

[sungod · Accepted solution]

The getNetworkEvents call can get you L7 blocks and content/security blocks for a specified network. Note that L3 firewall hits aren't available from this call.

There are a lot of event types, you probably will want to fetch only those of interest, you can get the list of possible event types using the getNetworkEventsEventTypes call, then choose the ones you want to use to filter results from the getNetworkEvents call, fwiw I use these filters...

productType="appliance", includedEventTypes = ["nbar_block", "cf_block", "sf_url_block", "sf_binary_block"]

There is also getNetworkApplianceSecurityEvents which gets some other classes of events, I suggest run it for a while to see what you get that you want to include.

For L3 firewall events, you can get them via syslog... https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Syslog_Event_Types_...