HEX
Server: LiteSpeed
System: Linux kapuas.iixcp.rumahweb.net 5.14.0-427.42.1.el9_4.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Nov 1 14:58:02 EDT 2024 x86_64
User: mirz4654 (1666)
PHP: 8.1.33
Disabled: system,exec,escapeshellarg,escapeshellcmd,passthru,proc_close,proc_get_status,proc_nice,proc_open,proc_terminate,shell_exec,popen,pclose,dl,pfsockopen,leak,apache_child_terminate,posix_kill,posix_mkfifo,posix_setsid,posix_setuid,posix_setpgid,ini_alter,show_source,define_syslog_variables,symlink,syslog,openlog,openlog,closelog,ocinumcols,listen,chgrp,apache_note,apache_setenv,debugger_on,debugger_off,ftp_exec,dll,ftp,myshellexec,socket_bind,mail,posix_getwpuid
$ pwd: /lib/python3.9/site-packages/ansible_collections/cyberark/pas/rulebooks/
Upload Files
File: //lib/python3.9/site-packages/ansible_collections/cyberark/pas/rulebooks/disable_pas_user_kafka.yml
- name: Demo rules with kafka as source
  hosts: localhost 
  sources:
    - cyberark.eda.kafka:
        topic: ansible 
        host: localhost 
        port: 9092
  rules:
    - name: Check For User Suspension Event, Then Disable The User and Notify
      condition: event.body.syslog.audit_record.Severity == "Error" and event.body.syslog.audit_record.MessageID == "5"
      action:
        run_playbook:
          name: ../../../cyberark/pas/tests/disable_user.yml
          extra_vars:
            username: "{{ event.body.syslog.audit_record.Issuer }}"
@ Telegram