There is a command group 'az_logz_sub rule'. This group of commands could 'manage sub account tag rule with logz'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_logz_sub rule_update'.The syntax is: az logz sub-rule update [--add]
                        [--filtering-tags]
                        [--force-string]
                        [--ids]
                        [--monitor-name]
                        [--remove]
                        [--resource-group]
                        [--rule-set-name]
                        [--send-aad-logs {false, true}]
                        [--send-activity-logs {false, true}]
                        [--send-subscription-logs {false, true}]
                        [--set]
                        [--sub-account-name]
                        [--subscription]. The parameter '--add' is optional. add an object to a list of objects by specifying a path and key value pairs.  example: `--add property.listproperty <key=value, string or json string>`.. The parameter '--filtering-tags' is optional. list of filtering tags to be used for capturing logs. this only takes effect if sendactivitylogs flag is enabled. if empty, all resources will be captured. if only exclude action is specified, the rules will apply to the list of all available resources. if include actions are specified, the rules will only include resources with the associated tags.. The parameter '--force-string' is optional. when using 'set' or 'add', preserve string literals instead of attempting to convert to json.. The parameter '--ids' is optional. one or more resource ids (space-delimited). it should be a complete resource id containing all information of 'resource id' arguments. you should provide either --ids or other 'resource id' arguments.. The parameter '--monitor-name' is optional. monitor resource name.. The parameter '--remove' is optional. remove a property or an element from a list.  example: `--remove property.list <indextoremove>` or `--remove propertytoremove`.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--rule-set-name' is optional. rule set name of sub account.. The parameter '--send-aad-logs' is optional. flag specifying if aad logs should be sent for the monitor resource.. The parameter '--send-activity-logs' is optional. flag specifying if activity logs from azure resources should be sent for the monitor resource.. The parameter '--send-subscription-logs' is optional. flag specifying if subscription logs should be sent for the monitor resource.. The parameter '--set' is optional. update an object by specifying a property path and value to set.  example: `--set property1.property2=<value>`.. The parameter '--sub-account-name' is optional. sub account resource name.. The parameter '--subscription' is optional. name or id of subscription. you can configure the default subscription using `az account set -s name_or_id`.. 