Have you opened a support case to report it? If not, I recommend do so. ... View more

getOrganizations is open to every user to find out what they have some degree of access to.   Whereas getOrganizationSaml targets a specific org ID, so you need to have org access to use it.   If you have readonly access, you can only GET.   If you have read-write, you can use all request types, PUT, POST etc.   See... https://documentation.meraki.com/General_Administration/Other_Topics/Cisco_Meraki_Dashboard_API   ... View more

I never noticed that! Just configured it.   Yes, Insight is included in the SD-WAN tier.     ... View more

q: I am seeking assistance with a Python script I’m developing to notify me via email when WAN2 goes down. Despite setting up an API key and webhook through Ngrok, the script isn't sending notifications as expected.   a: you need to post your script for people to be able to review/advise   q: Additionally, I need guidance on how to access and monitor directly network appliances to check the status of WAN1 and WAN2, as the current Meraki alert system only supports WAN1.   a: see https://developer.cisco.com/meraki/api-v1/get-organization-appliance-uplink-statuses/   q: Could you please help me troubleshoot the script, provide instructions for accessing appliance status, and suggest how to configure notifications specifically for WAN2?   a: again, post the script. I do not think there's a Dashboard notification for WAN2, you would need to create a script that checks status periodically, for instance you might be able to simply ping it. ... View more

The N_/L_ prefix depends on the network type, see this page:   https://developer.cisco.com/meraki/build/deep-links/   But if I look at the source of a Dashboard page showing, say, an MR device in a combined network, then search for Mkiconf.locale_id and Mkiconf.ng_id, these are the L_ and N_ identifiers respectively, it appears both can exist for the same network, which looks like what you are experiencing....   Example (actual values altered): Mkiconf.locale_id = "602919401234567890"; Mkiconf.ng_id = "602919400987654321";   Why both? I have no idea!   I don't recall seeing an API call to get both, but I'd guess you could use the deep link capability explained on the link above to grab the JSON from a Dashboard page on the target network and get them that way.   ... View more

I think the way you suggest is straightforward 😀   Tbh with all the new/updated API calls, I need to spend a while reading through the details on each one - used to do this back in 80s/90s on new UNIX releases, I think it was actually faster riffling through the paper manuals than it is to do on the developer website... ... View more

Some other endpoints on the org had failures overnight, I haven't run any tests yet.   I'll message you the org ID.   It's an EU hosted org.   Edit: Currently, these three endpoints are failing every time I test...   getNetworkDevices  getNetworkClients getOrganizationWirelessDevicesPacketLossByClient   ...only on the affected org, the same scripts are running ok on other orgs. ... View more

Yes to both.   These are scripts running on an org that have been scheduled monthly for many months. Other orgs, same scripts, no issue.   Fyi I did another test run about 90 minutes ago, then only one endpoint failed (by-client), suggests it is a transient issue with that shard/org. ... View more

  I suspect the API intentionally does not return plaintext passwords.   For the get call, isn't 'enabled' true if a password has been set, otherwise false?   "localStatusPage": { "authentication": { "enabled": false, <<<<<< this one "username": "admin" }   ... View more

Can you validate numbers by putting a significant chunk of data through at a known time? A few large software images for instance. Then see how UI/API details compare.   Otherwise, I'd open a support case with exact details in case there's a problem. ... View more

It should be bytes.   I linked the org-wide call as it's simpler, but have not used it for ages, TBH I also use... https://developer.cisco.com/meraki/api-v1/get-network-appliance-uplinks-usage-history/ ...as the time series data is more useful.   When setting up, I tested API figures with GB amounts of data going through lab devices, it matched reasonably well. I never bother looking at the UI data as it's not how we monitor/analyse, also see comment below. I may do another controlled test sometime as a check to see if anything odd is going on with API numbers.   I'm always wary of comparing Dashboard UI numbers with API numbers. Unless you know the timing and rules used by Dashboard exactly match what you do with the API, there's no reliable comparison. Also, I suspect some Dashboard values may be cached results from a periodic calculation, not gathered and calculated on the fly when the page is rendered.   ... View more

Yes, though ARP/DHCP shouldn't be much.   Having extra API endpoints for MG data (and other things) is a request that's been made, but I've not seen anything on early access yet.   I suggest submit a feedback message via Dashboard adding your voice, perhaps it will help increase the chance of us getting this 😀 ... View more

For MX integrated cellular, it is available with... https://developer.cisco.com/meraki/api-v1/get-organization-appliance-uplinks-usage-by-network/ ...you get data for each individual uplink on each devices, typically: wan1, wan2, cellular.   For MG, I don't think there is anything yet.   If you are using the MG as an uplink for an MX, the above call gets you the traffic indirectly, though there'll be some underreporting as MG management traffic will not be in the MX numbers.   ... View more

This will get you the primary device inventory... https://developer.cisco.com/meraki/api-v1/get-organization-inventory-devices/   Where supported, you can get PSUs with... https://developer.cisco.com/meraki/api-v1/get-organization-devices-power-modules-statuses-by-device/   For SFPs it gets fiddlier, try these for switches... https://developer.cisco.com/meraki/api-v1/get-device-switch-ports/   https://developer.cisco.com/meraki/api-v1/get-organization-switch-ports-transceivers-readings-history-by-switch/   ...I don't recall anything for MX SFPs. ... View more

Yes, we had similar experience starting back in 2020, and a long period working with Meraki support getting resolution.   All endpoints returning 'measured' values need reason checking, it's not unique to Meraki API either.     ... View more

This is where you are probably better off using Python/whatever to create a script to do it. ..   get list of networks in org for each network     get mx data   You'll probably get other requests over time that would require this sort of approach to perform efficiently, may as well start now 😀 ... View more

Ok, currently the scope of that page is the list of Client VPN users vs. 'known' users that may have got into the list a variety of ways. I think It's really there to allow granting/removing Client VPN access, hence the lack of any rich API around it.   If you do not have any guest users (i.e. all will have an admin account), you can use https://developer.cisco.com/meraki/api-v1/get-organization-admins/ which gives you all admin users.   If there are guests, I'm not sure, if doing the https://developer.cisco.com/meraki/api-v1/get-network-meraki-auth-users/ call, which you (edit) might need to on all networks to build up the full list, isn't working then I don't think there's a way in the API.   In that case one option is to 'cheat' by making a screenscraper,  or to poke around in the page code and find out the URL used by the "Download as CSV" button, then use that to grab the list as a CSV you can process. ... View more

Ah, now I see.   You are trying to list the page titled "User management portal", is that correct? ... View more

I'm unclear exactly what are you trying to do.   You wrote "...given a number of users that is much lower than the amount that is shown in the UI dashboard for Meraki."   Which Dashboard page are you referring to? Is it Network->Clients?   As @John_on_API says, an 'authorized user' is related to a client device granted access via Meraki Authentication for a network.   An 'unauthorized user' is every client device that hasn't gained access that way, there is no 'user' identity there, it's just a client device.   ... View more

The getDeviceSwitchPortsStatuses call provides power usage (over timespan, default one day) for each port that has PoE enabled, it's the powerUsageInWh value.   This is device level power for an attached device such as an AP.   ... View more