VhOxddlmZmZmZeZdZdZdZddl m Z ddl m Z ddl mZddlmZd Zed k(rey y ) )absolute_importdivisionprint_functionac --- module: rule_info short_description: Obtain information about one or many QRadar Rules, with filter options description: - This module obtains information about one or many QRadar Rules, with filter options version_added: "1.0.0" deprecated: alternative: qradar_analytics_rules why: Newer and updated modules released with more functionality. removed_at_date: '2024-09-01' options: id: description: - Obtain only information of the Rule with provided ID required: false type: int name: description: - Obtain only information of the Rule that matches the provided name required: false type: str type: description: - Obtain only information for the Rules of a certain type required: false choices: [ "EVENT", "FLOW", "COMMON", "USER"] type: str owner: description: - Obtain only information of Rules owned by a certain user required: false type: str origin: description: - Obtain only information of Rules that are of a certain origin required: false choices: ["SYSTEM", "OVERRIDE", "USER"] type: str notes: - You may provide many filters and they will all be applied, except for C(id) as that will return only the Rule identified by the unique ID provided. author: Ansible Security Automation Team (@maxamillion) "  a - name: Get information about the Rule named "Custom Company DDoS Rule" ibm.qradar.rule_info: name: "Custom Company DDoS Rule" register: custom_ddos_rule_info - name: debugging output of the custom_ddos_rule_info registered variable debug: var: custom_ddos_rule_info )to_text) AnsibleModule)quote) QRadarRequestc Dttddtddtddtdgddtdgdd}t|d }t|}|jd r1|j d j |jd \}}yg}|jd r?|j tdj t|jd |jdr6|j tdj |jd|jdr6|j tdj |jd|jdr6|j tdj |jd|r3|j dj dj|\}}n|j d\}}|j|dy)NFint)requiredtypestr)EVENTFLOWCOMMONUSER)r choicesr)SYSTEMOVERRIDEr)idnameownerroriginT) argument_specsupports_check_moderz/api/analytics/rules/{0}rz name="{0}"rz owner={0}rztype={0}rz origin={0}z/api/analytics/rules?filter={0}&z/api/analytics/rules)ruleschanged) dictrr paramsgetformatappendr rjoin exit_json)argspecmoduleqradar_requestcoder query_strss h/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/ibm/qradar/plugins/modules/rule_info.pymainr-Qs U + 5u -E. 7 2 G d KF"6*N }}T$(( & - -fmmD.A B e  ==   l))'&--2G*HIJ  == !   k((w)?@A  ==   eJ$5$5fmmF6K$LM N == "   l))&--*ABC  (,,188*9MNKD%),,-CDKD%ue4__main__N) __future__rrrr __metaclass__ DOCUMENTATIONRETURNEXAMPLESansible.module_utils._textransible.module_utils.basicr+ansible.module_utils.six.moves.urllib.parser :ansible_collections.ibm.qradar.plugins.module_utils.qradarr r-__name__r.r,r;sSA@ , `  /4=T:5z zFr.