1. Packages
  2. Packages
  3. Panos Provider
  4. API Docs
  5. CustomSpyware
Viewing docs for panos 2.0.11
published on Tuesday, Apr 28, 2026 by paloaltonetworks
Viewing docs for panos 2.0.11
published on Tuesday, Apr 28, 2026 by paloaltonetworks

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as panos from "@pulumi/panos";
    
    const example = new panos.CustomSpyware("example", {
        name: "6900001",
        threatname: "my-custom-spyware",
        severity: "critical",
        location: {
            deviceGroup: {
                name: "my-device-group",
            },
        },
    });
    
    import pulumi
    import pulumi_panos as panos
    
    example = panos.CustomSpyware("example",
        name="6900001",
        threatname="my-custom-spyware",
        severity="critical",
        location={
            "device_group": {
                "name": "my-device-group",
            },
        })
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/panos/v2/panos"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := panos.NewCustomSpyware(ctx, "example", &panos.CustomSpywareArgs{
    			Name:       pulumi.String("6900001"),
    			Threatname: pulumi.String("my-custom-spyware"),
    			Severity:   pulumi.String("critical"),
    			Location: &panos.CustomSpywareLocationArgs{
    				DeviceGroup: &panos.CustomSpywareLocationDeviceGroupArgs{
    					Name: pulumi.String("my-device-group"),
    				},
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Panos = Pulumi.Panos;
    
    return await Deployment.RunAsync(() => 
    {
        var example = new Panos.CustomSpyware("example", new()
        {
            Name = "6900001",
            Threatname = "my-custom-spyware",
            Severity = "critical",
            Location = new Panos.Inputs.CustomSpywareLocationArgs
            {
                DeviceGroup = new Panos.Inputs.CustomSpywareLocationDeviceGroupArgs
                {
                    Name = "my-device-group",
                },
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.panos.CustomSpyware;
    import com.pulumi.panos.CustomSpywareArgs;
    import com.pulumi.panos.inputs.CustomSpywareLocationArgs;
    import com.pulumi.panos.inputs.CustomSpywareLocationDeviceGroupArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var example = new CustomSpyware("example", CustomSpywareArgs.builder()
                .name("6900001")
                .threatname("my-custom-spyware")
                .severity("critical")
                .location(CustomSpywareLocationArgs.builder()
                    .deviceGroup(CustomSpywareLocationDeviceGroupArgs.builder()
                        .name("my-device-group")
                        .build())
                    .build())
                .build());
    
        }
    }
    
    resources:
      example:
        type: panos:CustomSpyware
        properties:
          name: 6.900001e+06
          threatname: my-custom-spyware
          severity: critical
          location:
            deviceGroup:
              name: my-device-group
    

    Create CustomSpyware Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new CustomSpyware(name: string, args: CustomSpywareArgs, opts?: CustomResourceOptions);
    @overload
    def CustomSpyware(resource_name: str,
                      args: CustomSpywareArgs,
                      opts: Optional[ResourceOptions] = None)
    
    @overload
    def CustomSpyware(resource_name: str,
                      opts: Optional[ResourceOptions] = None,
                      location: Optional[CustomSpywareLocationArgs] = None,
                      default_action: Optional[CustomSpywareDefaultActionArgs] = None,
                      cves: Optional[Sequence[str]] = None,
                      bugtraqs: Optional[Sequence[str]] = None,
                      direction: Optional[str] = None,
                      disable_override: Optional[str] = None,
                      comment: Optional[str] = None,
                      name: Optional[str] = None,
                      references: Optional[Sequence[str]] = None,
                      severity: Optional[str] = None,
                      signature: Optional[CustomSpywareSignatureArgs] = None,
                      threatname: Optional[str] = None,
                      vendors: Optional[Sequence[str]] = None)
    func NewCustomSpyware(ctx *Context, name string, args CustomSpywareArgs, opts ...ResourceOption) (*CustomSpyware, error)
    public CustomSpyware(string name, CustomSpywareArgs args, CustomResourceOptions? opts = null)
    public CustomSpyware(String name, CustomSpywareArgs args)
    public CustomSpyware(String name, CustomSpywareArgs args, CustomResourceOptions options)
    
    type: panos:CustomSpyware
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args CustomSpywareArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CustomSpywareArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CustomSpywareArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CustomSpywareArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CustomSpywareArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var customSpywareResource = new Panos.CustomSpyware("customSpywareResource", new()
    {
        Location = new Panos.Inputs.CustomSpywareLocationArgs
        {
            DeviceGroup = new Panos.Inputs.CustomSpywareLocationDeviceGroupArgs
            {
                Name = "string",
                PanoramaDevice = "string",
            },
            Shared = null,
            Vsys = new Panos.Inputs.CustomSpywareLocationVsysArgs
            {
                Name = "string",
                NgfwDevice = "string",
            },
        },
        DefaultAction = new Panos.Inputs.CustomSpywareDefaultActionArgs
        {
            Alert = null,
            Allow = null,
            BlockIp = new Panos.Inputs.CustomSpywareDefaultActionBlockIpArgs
            {
                Duration = 0,
                TrackBy = "string",
            },
            Drop = null,
            ResetBoth = null,
            ResetClient = null,
            ResetServer = null,
        },
        Cves = new[]
        {
            "string",
        },
        Bugtraqs = new[]
        {
            "string",
        },
        Direction = "string",
        DisableOverride = "string",
        Comment = "string",
        Name = "string",
        References = new[]
        {
            "string",
        },
        Severity = "string",
        Signature = new Panos.Inputs.CustomSpywareSignatureArgs
        {
            Combination = new Panos.Inputs.CustomSpywareSignatureCombinationArgs
            {
                AndConditions = new[]
                {
                    new Panos.Inputs.CustomSpywareSignatureCombinationAndConditionArgs
                    {
                        Name = "string",
                        OrConditions = new[]
                        {
                            new Panos.Inputs.CustomSpywareSignatureCombinationAndConditionOrConditionArgs
                            {
                                Name = "string",
                                ThreatId = "string",
                            },
                        },
                    },
                },
                OrderFree = false,
                TimeAttribute = new Panos.Inputs.CustomSpywareSignatureCombinationTimeAttributeArgs
                {
                    Interval = 0,
                    Threshold = 0,
                    TrackBy = "string",
                },
            },
            Standards = new[]
            {
                new Panos.Inputs.CustomSpywareSignatureStandardArgs
                {
                    Name = "string",
                    AndConditions = new[]
                    {
                        new Panos.Inputs.CustomSpywareSignatureStandardAndConditionArgs
                        {
                            Name = "string",
                            OrConditions = new[]
                            {
                                new Panos.Inputs.CustomSpywareSignatureStandardAndConditionOrConditionArgs
                                {
                                    Name = "string",
                                    Operator = new Panos.Inputs.CustomSpywareSignatureStandardAndConditionOrConditionOperatorArgs
                                    {
                                        EqualTo = new Panos.Inputs.CustomSpywareSignatureStandardAndConditionOrConditionOperatorEqualToArgs
                                        {
                                            Context = "string",
                                            Negate = false,
                                            Qualifiers = new[]
                                            {
                                                new Panos.Inputs.CustomSpywareSignatureStandardAndConditionOrConditionOperatorEqualToQualifierArgs
                                                {
                                                    Name = "string",
                                                    Value = "string",
                                                },
                                            },
                                            Value = 0,
                                        },
                                        GreaterThan = new Panos.Inputs.CustomSpywareSignatureStandardAndConditionOrConditionOperatorGreaterThanArgs
                                        {
                                            Context = "string",
                                            Qualifiers = new[]
                                            {
                                                new Panos.Inputs.CustomSpywareSignatureStandardAndConditionOrConditionOperatorGreaterThanQualifierArgs
                                                {
                                                    Name = "string",
                                                    Value = "string",
                                                },
                                            },
                                            Value = 0,
                                        },
                                        LessThan = new Panos.Inputs.CustomSpywareSignatureStandardAndConditionOrConditionOperatorLessThanArgs
                                        {
                                            Context = "string",
                                            Qualifiers = new[]
                                            {
                                                new Panos.Inputs.CustomSpywareSignatureStandardAndConditionOrConditionOperatorLessThanQualifierArgs
                                                {
                                                    Name = "string",
                                                    Value = "string",
                                                },
                                            },
                                            Value = 0,
                                        },
                                        PatternMatch = new Panos.Inputs.CustomSpywareSignatureStandardAndConditionOrConditionOperatorPatternMatchArgs
                                        {
                                            Context = "string",
                                            Negate = false,
                                            Pattern = "string",
                                            Qualifiers = new[]
                                            {
                                                new Panos.Inputs.CustomSpywareSignatureStandardAndConditionOrConditionOperatorPatternMatchQualifierArgs
                                                {
                                                    Name = "string",
                                                    Value = "string",
                                                },
                                            },
                                        },
                                    },
                                },
                            },
                        },
                    },
                    Comment = "string",
                    OrderFree = false,
                    Scope = "string",
                },
            },
        },
        Threatname = "string",
        Vendors = new[]
        {
            "string",
        },
    });
    
    example, err := panos.NewCustomSpyware(ctx, "customSpywareResource", &panos.CustomSpywareArgs{
    	Location: &panos.CustomSpywareLocationArgs{
    		DeviceGroup: &panos.CustomSpywareLocationDeviceGroupArgs{
    			Name:           pulumi.String("string"),
    			PanoramaDevice: pulumi.String("string"),
    		},
    		Shared: &panos.CustomSpywareLocationSharedArgs{},
    		Vsys: &panos.CustomSpywareLocationVsysArgs{
    			Name:       pulumi.String("string"),
    			NgfwDevice: pulumi.String("string"),
    		},
    	},
    	DefaultAction: &panos.CustomSpywareDefaultActionArgs{
    		Alert: &panos.CustomSpywareDefaultActionAlertArgs{},
    		Allow: &panos.CustomSpywareDefaultActionAllowArgs{},
    		BlockIp: &panos.CustomSpywareDefaultActionBlockIpArgs{
    			Duration: pulumi.Float64(0),
    			TrackBy:  pulumi.String("string"),
    		},
    		Drop:        &panos.CustomSpywareDefaultActionDropArgs{},
    		ResetBoth:   &panos.CustomSpywareDefaultActionResetBothArgs{},
    		ResetClient: &panos.CustomSpywareDefaultActionResetClientArgs{},
    		ResetServer: &panos.CustomSpywareDefaultActionResetServerArgs{},
    	},
    	Cves: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	Bugtraqs: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	Direction:       pulumi.String("string"),
    	DisableOverride: pulumi.String("string"),
    	Comment:         pulumi.String("string"),
    	Name:            pulumi.String("string"),
    	References: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	Severity: pulumi.String("string"),
    	Signature: &panos.CustomSpywareSignatureArgs{
    		Combination: &panos.CustomSpywareSignatureCombinationArgs{
    			AndConditions: panos.CustomSpywareSignatureCombinationAndConditionArray{
    				&panos.CustomSpywareSignatureCombinationAndConditionArgs{
    					Name: pulumi.String("string"),
    					OrConditions: panos.CustomSpywareSignatureCombinationAndConditionOrConditionArray{
    						&panos.CustomSpywareSignatureCombinationAndConditionOrConditionArgs{
    							Name:     pulumi.String("string"),
    							ThreatId: pulumi.String("string"),
    						},
    					},
    				},
    			},
    			OrderFree: pulumi.Bool(false),
    			TimeAttribute: &panos.CustomSpywareSignatureCombinationTimeAttributeArgs{
    				Interval:  pulumi.Float64(0),
    				Threshold: pulumi.Float64(0),
    				TrackBy:   pulumi.String("string"),
    			},
    		},
    		Standards: panos.CustomSpywareSignatureStandardArray{
    			&panos.CustomSpywareSignatureStandardArgs{
    				Name: pulumi.String("string"),
    				AndConditions: panos.CustomSpywareSignatureStandardAndConditionArray{
    					&panos.CustomSpywareSignatureStandardAndConditionArgs{
    						Name: pulumi.String("string"),
    						OrConditions: panos.CustomSpywareSignatureStandardAndConditionOrConditionArray{
    							&panos.CustomSpywareSignatureStandardAndConditionOrConditionArgs{
    								Name: pulumi.String("string"),
    								Operator: &panos.CustomSpywareSignatureStandardAndConditionOrConditionOperatorArgs{
    									EqualTo: &panos.CustomSpywareSignatureStandardAndConditionOrConditionOperatorEqualToArgs{
    										Context: pulumi.String("string"),
    										Negate:  pulumi.Bool(false),
    										Qualifiers: panos.CustomSpywareSignatureStandardAndConditionOrConditionOperatorEqualToQualifierArray{
    											&panos.CustomSpywareSignatureStandardAndConditionOrConditionOperatorEqualToQualifierArgs{
    												Name:  pulumi.String("string"),
    												Value: pulumi.String("string"),
    											},
    										},
    										Value: pulumi.Float64(0),
    									},
    									GreaterThan: &panos.CustomSpywareSignatureStandardAndConditionOrConditionOperatorGreaterThanArgs{
    										Context: pulumi.String("string"),
    										Qualifiers: panos.CustomSpywareSignatureStandardAndConditionOrConditionOperatorGreaterThanQualifierArray{
    											&panos.CustomSpywareSignatureStandardAndConditionOrConditionOperatorGreaterThanQualifierArgs{
    												Name:  pulumi.String("string"),
    												Value: pulumi.String("string"),
    											},
    										},
    										Value: pulumi.Float64(0),
    									},
    									LessThan: &panos.CustomSpywareSignatureStandardAndConditionOrConditionOperatorLessThanArgs{
    										Context: pulumi.String("string"),
    										Qualifiers: panos.CustomSpywareSignatureStandardAndConditionOrConditionOperatorLessThanQualifierArray{
    											&panos.CustomSpywareSignatureStandardAndConditionOrConditionOperatorLessThanQualifierArgs{
    												Name:  pulumi.String("string"),
    												Value: pulumi.String("string"),
    											},
    										},
    										Value: pulumi.Float64(0),
    									},
    									PatternMatch: &panos.CustomSpywareSignatureStandardAndConditionOrConditionOperatorPatternMatchArgs{
    										Context: pulumi.String("string"),
    										Negate:  pulumi.Bool(false),
    										Pattern: pulumi.String("string"),
    										Qualifiers: panos.CustomSpywareSignatureStandardAndConditionOrConditionOperatorPatternMatchQualifierArray{
    											&panos.CustomSpywareSignatureStandardAndConditionOrConditionOperatorPatternMatchQualifierArgs{
    												Name:  pulumi.String("string"),
    												Value: pulumi.String("string"),
    											},
    										},
    									},
    								},
    							},
    						},
    					},
    				},
    				Comment:   pulumi.String("string"),
    				OrderFree: pulumi.Bool(false),
    				Scope:     pulumi.String("string"),
    			},
    		},
    	},
    	Threatname: pulumi.String("string"),
    	Vendors: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    })
    
    var customSpywareResource = new CustomSpyware("customSpywareResource", CustomSpywareArgs.builder()
        .location(CustomSpywareLocationArgs.builder()
            .deviceGroup(CustomSpywareLocationDeviceGroupArgs.builder()
                .name("string")
                .panoramaDevice("string")
                .build())
            .shared(CustomSpywareLocationSharedArgs.builder()
                .build())
            .vsys(CustomSpywareLocationVsysArgs.builder()
                .name("string")
                .ngfwDevice("string")
                .build())
            .build())
        .defaultAction(CustomSpywareDefaultActionArgs.builder()
            .alert(CustomSpywareDefaultActionAlertArgs.builder()
                .build())
            .allow(CustomSpywareDefaultActionAllowArgs.builder()
                .build())
            .blockIp(CustomSpywareDefaultActionBlockIpArgs.builder()
                .duration(0.0)
                .trackBy("string")
                .build())
            .drop(CustomSpywareDefaultActionDropArgs.builder()
                .build())
            .resetBoth(CustomSpywareDefaultActionResetBothArgs.builder()
                .build())
            .resetClient(CustomSpywareDefaultActionResetClientArgs.builder()
                .build())
            .resetServer(CustomSpywareDefaultActionResetServerArgs.builder()
                .build())
            .build())
        .cves("string")
        .bugtraqs("string")
        .direction("string")
        .disableOverride("string")
        .comment("string")
        .name("string")
        .references("string")
        .severity("string")
        .signature(CustomSpywareSignatureArgs.builder()
            .combination(CustomSpywareSignatureCombinationArgs.builder()
                .andConditions(CustomSpywareSignatureCombinationAndConditionArgs.builder()
                    .name("string")
                    .orConditions(CustomSpywareSignatureCombinationAndConditionOrConditionArgs.builder()
                        .name("string")
                        .threatId("string")
                        .build())
                    .build())
                .orderFree(false)
                .timeAttribute(CustomSpywareSignatureCombinationTimeAttributeArgs.builder()
                    .interval(0.0)
                    .threshold(0.0)
                    .trackBy("string")
                    .build())
                .build())
            .standards(CustomSpywareSignatureStandardArgs.builder()
                .name("string")
                .andConditions(CustomSpywareSignatureStandardAndConditionArgs.builder()
                    .name("string")
                    .orConditions(CustomSpywareSignatureStandardAndConditionOrConditionArgs.builder()
                        .name("string")
                        .operator(CustomSpywareSignatureStandardAndConditionOrConditionOperatorArgs.builder()
                            .equalTo(CustomSpywareSignatureStandardAndConditionOrConditionOperatorEqualToArgs.builder()
                                .context("string")
                                .negate(false)
                                .qualifiers(CustomSpywareSignatureStandardAndConditionOrConditionOperatorEqualToQualifierArgs.builder()
                                    .name("string")
                                    .value("string")
                                    .build())
                                .value(0.0)
                                .build())
                            .greaterThan(CustomSpywareSignatureStandardAndConditionOrConditionOperatorGreaterThanArgs.builder()
                                .context("string")
                                .qualifiers(CustomSpywareSignatureStandardAndConditionOrConditionOperatorGreaterThanQualifierArgs.builder()
                                    .name("string")
                                    .value("string")
                                    .build())
                                .value(0.0)
                                .build())
                            .lessThan(CustomSpywareSignatureStandardAndConditionOrConditionOperatorLessThanArgs.builder()
                                .context("string")
                                .qualifiers(CustomSpywareSignatureStandardAndConditionOrConditionOperatorLessThanQualifierArgs.builder()
                                    .name("string")
                                    .value("string")
                                    .build())
                                .value(0.0)
                                .build())
                            .patternMatch(CustomSpywareSignatureStandardAndConditionOrConditionOperatorPatternMatchArgs.builder()
                                .context("string")
                                .negate(false)
                                .pattern("string")
                                .qualifiers(CustomSpywareSignatureStandardAndConditionOrConditionOperatorPatternMatchQualifierArgs.builder()
                                    .name("string")
                                    .value("string")
                                    .build())
                                .build())
                            .build())
                        .build())
                    .build())
                .comment("string")
                .orderFree(false)
                .scope("string")
                .build())
            .build())
        .threatname("string")
        .vendors("string")
        .build());
    
    custom_spyware_resource = panos.CustomSpyware("customSpywareResource",
        location={
            "device_group": {
                "name": "string",
                "panorama_device": "string",
            },
            "shared": {},
            "vsys": {
                "name": "string",
                "ngfw_device": "string",
            },
        },
        default_action={
            "alert": {},
            "allow": {},
            "block_ip": {
                "duration": float(0),
                "track_by": "string",
            },
            "drop": {},
            "reset_both": {},
            "reset_client": {},
            "reset_server": {},
        },
        cves=["string"],
        bugtraqs=["string"],
        direction="string",
        disable_override="string",
        comment="string",
        name="string",
        references=["string"],
        severity="string",
        signature={
            "combination": {
                "and_conditions": [{
                    "name": "string",
                    "or_conditions": [{
                        "name": "string",
                        "threat_id": "string",
                    }],
                }],
                "order_free": False,
                "time_attribute": {
                    "interval": float(0),
                    "threshold": float(0),
                    "track_by": "string",
                },
            },
            "standards": [{
                "name": "string",
                "and_conditions": [{
                    "name": "string",
                    "or_conditions": [{
                        "name": "string",
                        "operator": {
                            "equal_to": {
                                "context": "string",
                                "negate": False,
                                "qualifiers": [{
                                    "name": "string",
                                    "value": "string",
                                }],
                                "value": float(0),
                            },
                            "greater_than": {
                                "context": "string",
                                "qualifiers": [{
                                    "name": "string",
                                    "value": "string",
                                }],
                                "value": float(0),
                            },
                            "less_than": {
                                "context": "string",
                                "qualifiers": [{
                                    "name": "string",
                                    "value": "string",
                                }],
                                "value": float(0),
                            },
                            "pattern_match": {
                                "context": "string",
                                "negate": False,
                                "pattern": "string",
                                "qualifiers": [{
                                    "name": "string",
                                    "value": "string",
                                }],
                            },
                        },
                    }],
                }],
                "comment": "string",
                "order_free": False,
                "scope": "string",
            }],
        },
        threatname="string",
        vendors=["string"])
    
    const customSpywareResource = new panos.CustomSpyware("customSpywareResource", {
        location: {
            deviceGroup: {
                name: "string",
                panoramaDevice: "string",
            },
            shared: {},
            vsys: {
                name: "string",
                ngfwDevice: "string",
            },
        },
        defaultAction: {
            alert: {},
            allow: {},
            blockIp: {
                duration: 0,
                trackBy: "string",
            },
            drop: {},
            resetBoth: {},
            resetClient: {},
            resetServer: {},
        },
        cves: ["string"],
        bugtraqs: ["string"],
        direction: "string",
        disableOverride: "string",
        comment: "string",
        name: "string",
        references: ["string"],
        severity: "string",
        signature: {
            combination: {
                andConditions: [{
                    name: "string",
                    orConditions: [{
                        name: "string",
                        threatId: "string",
                    }],
                }],
                orderFree: false,
                timeAttribute: {
                    interval: 0,
                    threshold: 0,
                    trackBy: "string",
                },
            },
            standards: [{
                name: "string",
                andConditions: [{
                    name: "string",
                    orConditions: [{
                        name: "string",
                        operator: {
                            equalTo: {
                                context: "string",
                                negate: false,
                                qualifiers: [{
                                    name: "string",
                                    value: "string",
                                }],
                                value: 0,
                            },
                            greaterThan: {
                                context: "string",
                                qualifiers: [{
                                    name: "string",
                                    value: "string",
                                }],
                                value: 0,
                            },
                            lessThan: {
                                context: "string",
                                qualifiers: [{
                                    name: "string",
                                    value: "string",
                                }],
                                value: 0,
                            },
                            patternMatch: {
                                context: "string",
                                negate: false,
                                pattern: "string",
                                qualifiers: [{
                                    name: "string",
                                    value: "string",
                                }],
                            },
                        },
                    }],
                }],
                comment: "string",
                orderFree: false,
                scope: "string",
            }],
        },
        threatname: "string",
        vendors: ["string"],
    });
    
    type: panos:CustomSpyware
    properties:
        bugtraqs:
            - string
        comment: string
        cves:
            - string
        defaultAction:
            alert: {}
            allow: {}
            blockIp:
                duration: 0
                trackBy: string
            drop: {}
            resetBoth: {}
            resetClient: {}
            resetServer: {}
        direction: string
        disableOverride: string
        location:
            deviceGroup:
                name: string
                panoramaDevice: string
            shared: {}
            vsys:
                name: string
                ngfwDevice: string
        name: string
        references:
            - string
        severity: string
        signature:
            combination:
                andConditions:
                    - name: string
                      orConditions:
                        - name: string
                          threatId: string
                orderFree: false
                timeAttribute:
                    interval: 0
                    threshold: 0
                    trackBy: string
            standards:
                - andConditions:
                    - name: string
                      orConditions:
                        - name: string
                          operator:
                            equalTo:
                                context: string
                                negate: false
                                qualifiers:
                                    - name: string
                                      value: string
                                value: 0
                            greaterThan:
                                context: string
                                qualifiers:
                                    - name: string
                                      value: string
                                value: 0
                            lessThan:
                                context: string
                                qualifiers:
                                    - name: string
                                      value: string
                                value: 0
                            patternMatch:
                                context: string
                                negate: false
                                pattern: string
                                qualifiers:
                                    - name: string
                                      value: string
                  comment: string
                  name: string
                  orderFree: false
                  scope: string
        threatname: string
        vendors:
            - string
    

    CustomSpyware Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The CustomSpyware resource accepts the following input properties:

    Location CustomSpywareLocation
    The location of this object.
    Bugtraqs List<string>
    Comment string
    Cves List<string>
    DefaultAction CustomSpywareDefaultAction
    Direction string
    DisableOverride string
    disable object override in child device groups
    Name string
    References List<string>
    Severity string
    Signature CustomSpywareSignature
    Threatname string
    alphanumeric string [ 0-9a-zA-Z._-]
    Vendors List<string>
    Location CustomSpywareLocationArgs
    The location of this object.
    Bugtraqs []string
    Comment string
    Cves []string
    DefaultAction CustomSpywareDefaultActionArgs
    Direction string
    DisableOverride string
    disable object override in child device groups
    Name string
    References []string
    Severity string
    Signature CustomSpywareSignatureArgs
    Threatname string
    alphanumeric string [ 0-9a-zA-Z._-]
    Vendors []string
    location CustomSpywareLocation
    The location of this object.
    bugtraqs List<String>
    comment String
    cves List<String>
    defaultAction CustomSpywareDefaultAction
    direction String
    disableOverride String
    disable object override in child device groups
    name String
    references List<String>
    severity String
    signature CustomSpywareSignature
    threatname String
    alphanumeric string [ 0-9a-zA-Z._-]
    vendors List<String>
    location CustomSpywareLocation
    The location of this object.
    bugtraqs string[]
    comment string
    cves string[]
    defaultAction CustomSpywareDefaultAction
    direction string
    disableOverride string
    disable object override in child device groups
    name string
    references string[]
    severity string
    signature CustomSpywareSignature
    threatname string
    alphanumeric string [ 0-9a-zA-Z._-]
    vendors string[]
    location CustomSpywareLocationArgs
    The location of this object.
    bugtraqs Sequence[str]
    comment str
    cves Sequence[str]
    default_action CustomSpywareDefaultActionArgs
    direction str
    disable_override str
    disable object override in child device groups
    name str
    references Sequence[str]
    severity str
    signature CustomSpywareSignatureArgs
    threatname str
    alphanumeric string [ 0-9a-zA-Z._-]
    vendors Sequence[str]
    location Property Map
    The location of this object.
    bugtraqs List<String>
    comment String
    cves List<String>
    defaultAction Property Map
    direction String
    disableOverride String
    disable object override in child device groups
    name String
    references List<String>
    severity String
    signature Property Map
    threatname String
    alphanumeric string [ 0-9a-zA-Z._-]
    vendors List<String>

    Outputs

    All input properties are implicitly available as output properties. Additionally, the CustomSpyware resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing CustomSpyware Resource

    Get an existing CustomSpyware resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: CustomSpywareState, opts?: CustomResourceOptions): CustomSpyware
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            bugtraqs: Optional[Sequence[str]] = None,
            comment: Optional[str] = None,
            cves: Optional[Sequence[str]] = None,
            default_action: Optional[CustomSpywareDefaultActionArgs] = None,
            direction: Optional[str] = None,
            disable_override: Optional[str] = None,
            location: Optional[CustomSpywareLocationArgs] = None,
            name: Optional[str] = None,
            references: Optional[Sequence[str]] = None,
            severity: Optional[str] = None,
            signature: Optional[CustomSpywareSignatureArgs] = None,
            threatname: Optional[str] = None,
            vendors: Optional[Sequence[str]] = None) -> CustomSpyware
    func GetCustomSpyware(ctx *Context, name string, id IDInput, state *CustomSpywareState, opts ...ResourceOption) (*CustomSpyware, error)
    public static CustomSpyware Get(string name, Input<string> id, CustomSpywareState? state, CustomResourceOptions? opts = null)
    public static CustomSpyware get(String name, Output<String> id, CustomSpywareState state, CustomResourceOptions options)
    resources:  _:    type: panos:CustomSpyware    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Bugtraqs List<string>
    Comment string
    Cves List<string>
    DefaultAction CustomSpywareDefaultAction
    Direction string
    DisableOverride string
    disable object override in child device groups
    Location CustomSpywareLocation
    The location of this object.
    Name string
    References List<string>
    Severity string
    Signature CustomSpywareSignature
    Threatname string
    alphanumeric string [ 0-9a-zA-Z._-]
    Vendors List<string>
    Bugtraqs []string
    Comment string
    Cves []string
    DefaultAction CustomSpywareDefaultActionArgs
    Direction string
    DisableOverride string
    disable object override in child device groups
    Location CustomSpywareLocationArgs
    The location of this object.
    Name string
    References []string
    Severity string
    Signature CustomSpywareSignatureArgs
    Threatname string
    alphanumeric string [ 0-9a-zA-Z._-]
    Vendors []string
    bugtraqs List<String>
    comment String
    cves List<String>
    defaultAction CustomSpywareDefaultAction
    direction String
    disableOverride String
    disable object override in child device groups
    location CustomSpywareLocation
    The location of this object.
    name String
    references List<String>
    severity String
    signature CustomSpywareSignature
    threatname String
    alphanumeric string [ 0-9a-zA-Z._-]
    vendors List<String>
    bugtraqs string[]
    comment string
    cves string[]
    defaultAction CustomSpywareDefaultAction
    direction string
    disableOverride string
    disable object override in child device groups
    location CustomSpywareLocation
    The location of this object.
    name string
    references string[]
    severity string
    signature CustomSpywareSignature
    threatname string
    alphanumeric string [ 0-9a-zA-Z._-]
    vendors string[]
    bugtraqs Sequence[str]
    comment str
    cves Sequence[str]
    default_action CustomSpywareDefaultActionArgs
    direction str
    disable_override str
    disable object override in child device groups
    location CustomSpywareLocationArgs
    The location of this object.
    name str
    references Sequence[str]
    severity str
    signature CustomSpywareSignatureArgs
    threatname str
    alphanumeric string [ 0-9a-zA-Z._-]
    vendors Sequence[str]
    bugtraqs List<String>
    comment String
    cves List<String>
    defaultAction Property Map
    direction String
    disableOverride String
    disable object override in child device groups
    location Property Map
    The location of this object.
    name String
    references List<String>
    severity String
    signature Property Map
    threatname String
    alphanumeric string [ 0-9a-zA-Z._-]
    vendors List<String>

    Supporting Types

    CustomSpywareDefaultAction, CustomSpywareDefaultActionArgs

    CustomSpywareDefaultActionBlockIp, CustomSpywareDefaultActionBlockIpArgs

    Duration double
    Duration for block ip
    TrackBy string
    Duration float64
    Duration for block ip
    TrackBy string
    duration Double
    Duration for block ip
    trackBy String
    duration number
    Duration for block ip
    trackBy string
    duration float
    Duration for block ip
    track_by str
    duration Number
    Duration for block ip
    trackBy String

    CustomSpywareLocation, CustomSpywareLocationArgs

    DeviceGroup CustomSpywareLocationDeviceGroup
    Located in a specific Device Group
    Shared CustomSpywareLocationShared
    Panorama shared object
    Vsys CustomSpywareLocationVsys
    Located in a specific Virtual System
    DeviceGroup CustomSpywareLocationDeviceGroup
    Located in a specific Device Group
    Shared CustomSpywareLocationShared
    Panorama shared object
    Vsys CustomSpywareLocationVsys
    Located in a specific Virtual System
    deviceGroup CustomSpywareLocationDeviceGroup
    Located in a specific Device Group
    shared CustomSpywareLocationShared
    Panorama shared object
    vsys CustomSpywareLocationVsys
    Located in a specific Virtual System
    deviceGroup CustomSpywareLocationDeviceGroup
    Located in a specific Device Group
    shared CustomSpywareLocationShared
    Panorama shared object
    vsys CustomSpywareLocationVsys
    Located in a specific Virtual System
    device_group CustomSpywareLocationDeviceGroup
    Located in a specific Device Group
    shared CustomSpywareLocationShared
    Panorama shared object
    vsys CustomSpywareLocationVsys
    Located in a specific Virtual System
    deviceGroup Property Map
    Located in a specific Device Group
    shared Property Map
    Panorama shared object
    vsys Property Map
    Located in a specific Virtual System

    CustomSpywareLocationDeviceGroup, CustomSpywareLocationDeviceGroupArgs

    Name string
    Device Group name
    PanoramaDevice string
    Panorama device name
    Name string
    Device Group name
    PanoramaDevice string
    Panorama device name
    name String
    Device Group name
    panoramaDevice String
    Panorama device name
    name string
    Device Group name
    panoramaDevice string
    Panorama device name
    name str
    Device Group name
    panorama_device str
    Panorama device name
    name String
    Device Group name
    panoramaDevice String
    Panorama device name

    CustomSpywareLocationVsys, CustomSpywareLocationVsysArgs

    Name string
    The Virtual System name
    NgfwDevice string
    The NGFW device name
    Name string
    The Virtual System name
    NgfwDevice string
    The NGFW device name
    name String
    The Virtual System name
    ngfwDevice String
    The NGFW device name
    name string
    The Virtual System name
    ngfwDevice string
    The NGFW device name
    name str
    The Virtual System name
    ngfw_device str
    The NGFW device name
    name String
    The Virtual System name
    ngfwDevice String
    The NGFW device name

    CustomSpywareSignature, CustomSpywareSignatureArgs

    CustomSpywareSignatureCombination, CustomSpywareSignatureCombinationArgs

    CustomSpywareSignatureCombinationAndCondition, CustomSpywareSignatureCombinationAndConditionArgs

    CustomSpywareSignatureCombinationAndConditionOrCondition, CustomSpywareSignatureCombinationAndConditionOrConditionArgs

    Name string
    ThreatId string
    threat id
    Name string
    ThreatId string
    threat id
    name String
    threatId String
    threat id
    name string
    threatId string
    threat id
    name str
    threat_id str
    threat id
    name String
    threatId String
    threat id

    CustomSpywareSignatureCombinationTimeAttribute, CustomSpywareSignatureCombinationTimeAttributeArgs

    Interval double
    Threshold double
    TrackBy string
    Interval float64
    Threshold float64
    TrackBy string
    interval Double
    threshold Double
    trackBy String
    interval number
    threshold number
    trackBy string
    interval Number
    threshold Number
    trackBy String

    CustomSpywareSignatureStandard, CustomSpywareSignatureStandardArgs

    CustomSpywareSignatureStandardAndCondition, CustomSpywareSignatureStandardAndConditionArgs

    CustomSpywareSignatureStandardAndConditionOrCondition, CustomSpywareSignatureStandardAndConditionOrConditionArgs

    CustomSpywareSignatureStandardAndConditionOrConditionOperator, CustomSpywareSignatureStandardAndConditionOrConditionOperatorArgs

    CustomSpywareSignatureStandardAndConditionOrConditionOperatorEqualTo, CustomSpywareSignatureStandardAndConditionOrConditionOperatorEqualToArgs

    CustomSpywareSignatureStandardAndConditionOrConditionOperatorEqualToQualifier, CustomSpywareSignatureStandardAndConditionOrConditionOperatorEqualToQualifierArgs

    Name string
    Value string
    Name string
    Value string
    name String
    value String
    name string
    value string
    name str
    value str
    name String
    value String

    CustomSpywareSignatureStandardAndConditionOrConditionOperatorGreaterThan, CustomSpywareSignatureStandardAndConditionOrConditionOperatorGreaterThanArgs

    CustomSpywareSignatureStandardAndConditionOrConditionOperatorGreaterThanQualifier, CustomSpywareSignatureStandardAndConditionOrConditionOperatorGreaterThanQualifierArgs

    Name string
    Value string
    Name string
    Value string
    name String
    value String
    name string
    value string
    name str
    value str
    name String
    value String

    CustomSpywareSignatureStandardAndConditionOrConditionOperatorLessThan, CustomSpywareSignatureStandardAndConditionOrConditionOperatorLessThanArgs

    CustomSpywareSignatureStandardAndConditionOrConditionOperatorLessThanQualifier, CustomSpywareSignatureStandardAndConditionOrConditionOperatorLessThanQualifierArgs

    Name string
    Value string
    Name string
    Value string
    name String
    value String
    name string
    value string
    name str
    value str
    name String
    value String

    CustomSpywareSignatureStandardAndConditionOrConditionOperatorPatternMatch, CustomSpywareSignatureStandardAndConditionOrConditionOperatorPatternMatchArgs

    CustomSpywareSignatureStandardAndConditionOrConditionOperatorPatternMatchQualifier, CustomSpywareSignatureStandardAndConditionOrConditionOperatorPatternMatchQualifierArgs

    Name string
    Value string
    Name string
    Value string
    name String
    value String
    name string
    value string
    name str
    value str
    name String
    value String

    Package Details

    Repository
    panos paloaltonetworks/terraform-provider-panos
    License
    Notes
    This Pulumi package is based on the panos Terraform Provider.
    Viewing docs for panos 2.0.11
    published on Tuesday, Apr 28, 2026 by paloaltonetworks
      Try Pulumi Cloud free. Your team will thank you.