PUT /staged_config/yara_rules

Uploads the supplied Yara rule file to the QRadar system. If the provided Yara file is empty - all rules are deleted from the system.

Uploads the supplied Yara rule file to the QRadar system.

Table 1. PUT /staged_config/yara_rules resource details
MIME Type
text/plain

Table 2. PUT /staged_config/yara_rules request body details
Parameter	Data Type	MIME Type	Description	Sample
file	File	application/zip	Required - The Yara rule file. Must be properly-formed Yara rule content, either a TEXT file, or a TEXT file within a ZIP or TAR.GZ archive. Must be provided with MIME type text/plain, application/zip, application/x-gzip or multipart/form-data	File

Table 3. PUT /staged_config/yara_rules response codes
HTTP Response Code	Unique Code	Description
200		The supplied Yara rule file was uploaded.
422	1101	Must be a correctly-formatted Yara rule file.
422	1103	The archive file must only contain a single Yara rule file.
422	1107	Invalid archive file was provided.
500	1104	Failed to extract the contents of the archive file.
500	1105	Yara validator script was terminated owing to timeout.
500	1106	Yara validator script encountered an unknown exception.

Response Description

In case of an error, the method returns an exception.

Response Sample