nac-analytics

In development — install from source today; PyPI release planned. Formerly nac-nd. Today it covers Cisco ACI via Nexus Dashboard 4.2.1+; the intent is to grow beyond Nexus Dashboard and add support for additional Cisco products, so one tool can drive change analytics across platforms.

CLI for change analysis on Cisco ACI fabrics via Nexus Dashboard 4.2.1+.

Commands are grouped per Cisco product: nac-analytics <product> <command>. Today the product is nexus-dashboard (alias nd); more products are planned.

Documentation

Nexus Dashboard Examples - delta & compliance

delta — compare snapshots after a change:

$ nac-analytics nd delta -output text

command: delta
fabric: FABRIC-A
pre_snapshot: snap-pre
post_snapshot: snap-post

=== Summary (/deltaAnalysis/summary) ===

New anomalies by severity:
  major     2

FAIL: New anomalies at or above the failure threshold: 2 major.

=== Resources (/deltaAnalysis/resources) ===
resourceType           new       removed       earlier         later
      tenant             1             0            12            13

=== Anomalies (/anomalies/details) ===
  severity     mnemonic                         resource              reason
  major        ENDPOINT_DUPLICATE_IP            web-epg              duplicate ip detected

compliance — rule status for the latest snapshot (by default, latest snapshot is used):

$ nac-analytics nd compliance -output text

command: compliance
fabric: FABRIC-A
snapshot: latest

Compliance:
  scope: latest snapshot
  enforced_rules: 42
  violated_rules: 1
  violating_rules:
    ruleName=no-open-tenant  ruleType=configuration  violationsCount=1

See prechange, delta, and compliance for usage.

Installation

Requirements: Nexus Dashboard 4.2.1+, Python 3.10+, an ACI fabric registered in Nexus Dashboard.

Install from PyPI:

pip install nac-analytics
nac-analytics --help

Or with uv:

uv tool install nac-analytics
nac-analytics --help

For development from source:

git clone https://github.com/netascode/nac-analytics.git
cd nac-analytics
uv sync --extra dev
uv run nac-analytics --help

Quick start

cp config.example.yaml nac-analytics.yaml   # edit host, fabric, domain
cp .env.example .env                 # set ND_USER and ND_PASSWORD
nac-analytics nd doctor

When working from a source checkout, prefix commands with uv run (for example uv run nac-analytics nd doctor).

Configuration

Precedence: CLI flags → environment variables → YAML → .env in cwd.

Settings are scoped per product. See config.example.yaml and Configuration.

Development

Contributors: see Development.