zia_list_ips_signature_rules
List custom IPS detection signatures (Snort/Suricata-style) authored on your ZIA tenant, with support for pagination and client-side filtering via JMESPath queries.
Instructions
List custom ZIA IPS signature rules (read-only) — Snort/Suricata-style detection signatures authored on the tenant. Distinct from the Cloud Firewall IPS rule family (zia_list_cloud_firewall_ips_rules), which gates enforcement of IPS on firewall-matched traffic; signatures describe what to detect. Supports pagination via the page / page_size parameters and JMESPath client-side filtering via the query parameter.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page offset for pagination (1-based). | |
| page_size | No | Number of records per page (default = ZIA tenant default). | |
| query | No | JMESPath expression for client-side filtering / projection of the returned signature list (e.g. "[?contains(name, 'Suricata')]" or "[*].{id: id, name: name, sid: rule_text}"). | |
| service | No | The service to use. | zia |