ibm.qradar.rule_info_module.rst

ibm.qradar.rule_info

Obtain information about one or many QRadar Rules, with filter options

Version added: 1.0.0

• DEPRECATED
• Synopsis
• Parameters
• Notes
• Examples
• Status

DEPRECATED

:Removed in collection release after 2024-09-01 :Why: Newer and updated modules released with more functionality. :Alternative: qradar_analytics_rules

Synopsis

• This module obtains information about one or many QRadar Rules, with filter options

Parameters

Parameter	Choices/Defaults	Comments
id integer		Obtain only information of the Rule with provided ID
name string		Obtain only information of the Rule that matches the provided name
origin string	Choices: SYSTEM OVERRIDE USER	Obtain only information of Rules that are of a certain origin
owner string		Obtain only information of Rules owned by a certain user
type string	Choices: EVENT FLOW COMMON USER	Obtain only information for the Rules of a certain type

Notes

Note

• You may provide many filters and they will all be applied, except for id as that will return only the Rule identified by the unique ID provided.

Examples

- name: Get information about the Rule named "Custom Company DDoS Rule"
  ibm.qradar.rule_info:
    name: "Custom Company DDoS Rule"
  register: custom_ddos_rule_info

- name: debugging output of the custom_ddos_rule_info registered variable
  debug:
    var: custom_ddos_rule_info

Status

• This module will be removed in a release after 2024-09-01. [deprecated]
• For more information see DEPRECATED.

Authors

• Ansible Security Automation Team (@maxamillion) <https://github.com/ansible-security>"