ibm.qradar.rule module – Manage state of QRadar Rules, with filter options

Note

This module is part of the ibm.qradar collection (version 1.0.3).

You might already have this collection installed if you are using the ansible package. It is not included in ansible-core. To check whether it is installed, run ansible-galaxy collection list.

To install it, use: ansible-galaxy collection install ibm.qradar.

To use it in a playbook, specify: ibm.qradar.rule.

New in version 1.0.0: of ibm.qradar

Synopsis

  • Manage state of QRadar Rules, with filter options

Parameters

Parameter

Comments

id

integer

Manage state of a QRadar Rule by ID

name

string

Manage state of a QRadar Rule by name

owner

string

Manage ownership of a QRadar Rule

state

string / required

Manage state of a QRadar Rule

Choices:

  • enabled

  • disabled

  • absent

Examples

- name: Enable Rule 'Ansible Example DDoS Rule'
  qradar_rule:
    name: 'Ansible Example DDOS Rule'
    state: enabled

Authors