.. _ibm.qradar.log_source_management_module: ******************************** ibm.qradar.log_source_management ******************************** **Manage Log Sources in QRadar** Version added: 1.0.0 .. contents:: :local: :depth: 1 DEPRECATED ---------- :Removed in collection release after 2024-09-01 :Why: Newer and updated modules released with more functionality. :Alternative: qradar_log_sources_management Synopsis -------- - This module allows for addition, deletion, or modification of Log Sources in QRadar Parameters ---------- .. raw:: html
Parameter Choices/Defaults Comments
description
string / required
Description of log source
identifier
string / required
Log Source Identifier (Typically IP Address or Hostname of log source)
name
string / required
Name of Log Source
protocol_type_id
integer
Type of protocol by id, as defined in QRadar Log Source Types Documentation
state
string / required
    Choices:
  • present
  • absent
Add or remove a log source.
type_id
integer
Type of resource by id, as defined in QRadar Log Source Types Documentation
type_name
string
Type of resource by name

Notes ----- .. note:: - Either ``type`` or ``type_id`` is required Examples -------- .. code-block:: yaml - name: Add a snort log source to IBM QRadar ibm.qradar.log_source_management: name: "Snort logs" type_name: "Snort Open Source IDS" state: present description: "Snort IDS remote logs from rsyslog" identifier: "192.168.1.101" Status ------ - This module will be removed in a release after 2024-09-01. *[deprecated]* - For more information see `DEPRECATED`_. Authors ~~~~~~~ - Ansible Security Automation Team (@maxamillion)