.. _ibm.qradar.rule_info_module:
********************
ibm.qradar.rule_info
********************
**Obtain information about one or many QRadar Rules, with filter options**
Version added: 1.0.0
.. contents::
:local:
:depth: 1
Synopsis
--------
- This module obtains information about one or many QRadar Rules, with filter options
Parameters
----------
.. raw:: html
Parameter |
Choices/Defaults |
Comments |
id
integer
|
|
Obtain only information of the Rule with provided ID
|
name
string
|
|
Obtain only information of the Rule that matches the provided name
|
origin
string
|
Choices:
- SYSTEM
- OVERRIDE
- USER
|
Obtain only information of Rules that are of a certain origin
|
owner
string
|
|
Obtain only information of Rules owned by a certain user
|
type
string
|
Choices:
- EVENT
- FLOW
- COMMON
- USER
|
Obtain only information for the Rules of a certain type
|
Notes
-----
.. note::
- You may provide many filters and they will all be applied, except for ``id`` as that will return only the Rule identified by the unique ID provided.
Examples
--------
.. code-block:: yaml+jinja
- name: Get information about the Rule named "Custom Company DDoS Rule"
ibm.qradar.rule_info:
name: "Custom Company DDoS Rule"
register: custom_ddos_rule_info
- name: debugging output of the custom_ddos_rule_info registered variable
debug:
var: custom_ddos_rule_info
Status
------
Authors
~~~~~~~
- Ansible Security Automation Team (@maxamillion) "