Experimental

Download 533
Last updated Sep 10, 2026

sonar-stream-rule-command-templates

Enumerate the command templates a stream rule's commands can be built from.

The id is what sonar-insert-stream-rule-command-batch and sonar-update-stream-rule-command-batch take as template_id, and config_specs says what args that template expects. Use template_id 1 to write a command as free-form query text instead.

sonar-stream-rule-command-templates [field_type=VALUE]
field_type=VALUE
Optional. Filter by the field type a template applies to: DATE, IP, PORT, STRING, SHORT, INT, LONG, MD5, URL or ETC

Output Fields

FieldTypeNameDescription
idIntegerIDe.g. 9. Pass this as template_id when writing a command
nameStringNamee.g. Port match. Template name
field_typeStringField typee.g. PORT. Field type the template applies to
descriptionStringDescriptionTemplate description
queryStringQueryQuery the template expands to, with its arguments left as placeholders
query2StringInverted queryThe negated form of the same template, used when the command sets invert to true
config_specsListConfig specsThe arguments this template expects, which is what goes in the args field