Create a device group through the REST API

1. In a browser, navigate to the REST API Explorer.
   The URL is the hostname or IP address of your ExtraHop system, followed by /api/v1/explore/. For example, if your hostname is seattle-eda, the URL is https://seattle-eda/api/v1/explore/.
2. Click Enter API Key and then paste or type your API key into the API Key field.
3. Click Authorize and then click Close.
4. Click Device Group and then click POST /devicegroups.
5. Click Try it out.
   The JSON schema is automatically added to the body parameter text box.
6. In the body field, specify properties for the device group that you want to create.
   For example, the following body creates a device group that includes CIDR blocks 192.168.0.0/26, 192.168.0.64/27, and 192.168.0.96/30:

   {
       "name": "New group",
       "description": "A newly created group",
       "filter": {
           "rules": [
               {
                   "field": "ipaddr",
                   "operand": "192.168.0.0/26",
                   "operator": "="
               },
               {
                   "field": "ipaddr",
                   "operand": "192.168.0.64/27",
                   "operator": "="
               },
               {
                   "field": "ipaddr",
                   "operand": "192.168.0.96/30",
                   "operator": "="
               }
           ],
           "operator": "or"
       }
   }

   Copy
7. Click Send Request.

The ExtraHop GitHub repository contains an example Python script that creates device groups by reading criteria from a CSV file that meets the following specifications:

1. Go to the ExtraHop code-examples GitHub repository and download the create_device_groups/create_device_groups.py file to your local machine.
2. In the directory you copied the create_device_groups.py to, create a CSV file that meets the following specifications:
   • The CSV file must not contain a header row.
   • Each row of the CSV file must contain the following three columns in the specified order:

     Device group name

     Description

     IP address or CIDR block

   • Each column after the first required three columns must specify an IP address or CIDR block for the device group.

   Note:

   For an example of a compatible CSV file, see the create_device_groups/device_group_list.csv file in the ExtraHop code-examples GitHub repository.

3. In a text editor, open the create_device_groups.py file and replace the following configuration variables with information from your environment:

   HOST: The IP address or hostname of the ExtraHop system

   API_KEY: The API key

   CSV_FILE: The file that contains the list of device groups

4. Run the following command:

   python create_device_groups.py

   Copy

   Note:

   If the script returns an error message that the SSL certificate verification failed, make sure that a trusted certificate has been added to your ExtraHop system. Alternatively, you can add the verify=False option to bypass certificate verification. However, this method is not secure and not recommended. The following code sends an HTTP GET request without certificate verification: requests.get(url, headers=headers, verify=False) Copy