cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 7

Disable rule in Trap Viewer with Powershell

I was wondering if it is possible to disable a trap rule in trap viewer via powershell.

0 Kudos
1 Reply

As far as i can tell the traprules and syslogrules tables are not present in SWQL, so you wouldn't be able to impact them via the API, but if you are feeling fancy you could just hook your powershell script directly into the SQL DB and make your changes there. Never tried to do it to manipulate the rules but I've done similar to other parts of the DB when there was no way to get to it in SWQL.

- Marc Netterfield, Github
0 Kudos