.. _ibm.qradar.log_source_management_module:
********************************
ibm.qradar.log_source_management
********************************
**Manage Log Sources in QRadar**
Version added: 1.0.0
.. contents::
:local:
:depth: 1
DEPRECATED
----------
:Removed in collection release after 2024-09-01
:Why: Newer and updated modules released with more functionality.
:Alternative: qradar_log_sources_management
Synopsis
--------
- This module allows for addition, deletion, or modification of Log Sources in QRadar
Parameters
----------
.. raw:: html
Parameter |
Choices/Defaults |
Comments |
description
string
/ required
|
|
Description of log source
|
identifier
string
/ required
|
|
Log Source Identifier (Typically IP Address or Hostname of log source)
|
name
string
/ required
|
|
Name of Log Source
|
protocol_type_id
integer
|
|
Type of protocol by id, as defined in QRadar Log Source Types Documentation
|
state
string
/ required
|
|
Add or remove a log source.
|
type_id
integer
|
|
Type of resource by id, as defined in QRadar Log Source Types Documentation
|
type_name
string
|
|
Type of resource by name
|
Notes
-----
.. note::
- Either ``type`` or ``type_id`` is required
Examples
--------
.. code-block:: yaml
- name: Add a snort log source to IBM QRadar
ibm.qradar.log_source_management:
name: "Snort logs"
type_name: "Snort Open Source IDS"
state: present
description: "Snort IDS remote logs from rsyslog"
identifier: "192.168.1.101"
Status
------
- This module will be removed in a release after 2024-09-01. *[deprecated]*
- For more information see `DEPRECATED`_.
Authors
~~~~~~~
- Ansible Security Automation Team (@maxamillion)