chronicle_ruledeployment_disabled.tf.tmpl

resource "google_chronicle_rule" "my-rule" {
 provider = "google-beta"
 location = "us"
 instance = "{{index $.TestEnvVars "chronicle_id"}}"
 text = <<-EOT
             rule test_rule { meta: events:  $userid = $e.principal.user.userid  match: $userid over 10m condition: $e }
         EOT
}

resource "google_chronicle_rule_deployment" "{{$.PrimaryResourceId}}" {
 provider = "google-beta"
 location = "us"
 instance = "{{index $.TestEnvVars "chronicle_id"}}"
 rule = element(split("/", resource.google_chronicle_rule.my-rule.name), length(split("/", resource.google_chronicle_rule.my-rule.name)) - 1)
 enabled = false
 run_frequency = "LIVE"
}