W3cubDocs

/Ansible

ibm.qradar.rule – Manage state of QRadar Rules, with filter options

Note

This plugin is part of the ibm.qradar collection (version 1.0.3).

You might already have this collection installed if you are using the ansible package. It is not included in ansible-core. To check whether it is installed, run ansible-galaxy collection list.

To install it, use: ansible-galaxy collection install ibm.qradar.

To use it in a playbook, specify: ibm.qradar.rule.

New in version 1.0.0: of ibm.qradar

Synopsis

  • Manage state of QRadar Rules, with filter options

Parameters

Parameter Choices/Defaults Comments
id
integer
Manage state of a QRadar Rule by ID
name
string
Manage state of a QRadar Rule by name
owner
string
Manage ownership of a QRadar Rule
state
string / required
    Choices:
  • enabled
  • disabled
  • absent
Manage state of a QRadar Rule

Examples

- name: Enable Rule 'Ansible Example DDoS Rule'
  qradar_rule:
    name: 'Ansible Example DDOS Rule'
    state: enabled

Authors

© 2012–2018 Michael DeHaan
© 2018–2021 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/latest/collections/ibm/qradar/rule_module.html