get_rule_details
Retrieve the complete definition of any OSSEC rule by its ID, including matching criteria, parent rules, frequency, and group affiliation.
Instructions
Get the full details of a specific OSSEC rule by its ID.
Returns the complete rule definition including all matching criteria, parent rules, frequency settings, and associated group.
Args: rule_id: The rule ID to look up (e.g., '5710').
Returns: JSON object with the complete rule definition.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| rule_id | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |