Occasional Contributor I

Pull Endpoints through API

Hi community,


I need to pull a list of all end-points (including details like device type, hostname, ip, etc.) from ClearPass through its API. The process that works is:

First, pull a high-level list of all available MAC addresses: /api/endpoint

Then iterate that list and run two API calls per MAC:

 - /insight/endpoint/mac/001aef1a188b

 - /async_netd/deviceprofiler/endpoints/001aef1a188b


I need to run the call to async_netd in order to get the hostname per device as the /insight/endpoint/mac API wouldn't return that info.


My question is: is there a more efficient way to pull all those end-point details?

The reason this is not very efficient: let's assume you have an environment with 10.000 end-points. I will need to run 1 + 10.000 + 10.000 API calls to get all details from all end-points. That takes more than 20 minutes to process and puts the ClearPass server under quite some load for quite a long time.

Any ideas on improving this?



Guru Elite

Re: Pull Endpoints through API

What is the goal of pulling all of the endpoints?

| Tim Cappalli | Aruba Security | @timcappalli | |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Occasional Contributor I

Re: Pull Endpoints through API

Synchronizing them with a CMDB

Occasional Contributor I

Re: Pull Endpoints through API

I have to perform the same action. Do you have a more efficient solution?

Occasional Contributor I

Re: Pull Endpoints through API

No, I did not find a more efficient solution :(

Search Airheads
Showing results for 
Search instead for 
Did you mean: