There is a command group 'az_palo alto_cloudngfw_local rulestack_local rule'. This group of commands could 'manage local rulestack local rule resource'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_palo alto_cloudngfw_local rulestack_local rule_create'.The syntax is: az palo-alto cloudngfw local-rulestack local-rule create --local-rulestack-name
                                                         --priority
                                                         --resource-group
                                                         --rule-name
                                                         [--action-type {allow, denyresetboth, denyresetserver, denysilent}]
                                                         [--applications]
                                                         [--audit-comment]
                                                         [--category]
                                                         [--decryption-rule-type {none, sslinboundinspection, ssloutboundinspection}]
                                                         [--description]
                                                         [--destination]
                                                         [--enable-logging {disabled, enabled}]
                                                         [--etag]
                                                         [--inbound-certificate]
                                                         [--negate-destination {false, true}]
                                                         [--negate-source {false, true}]
                                                         [--no-wait {0, 1, f, false, n, no, t, true, y, yes}]
                                                         [--protocol]
                                                         [--protocol-port-list]
                                                         [--rule-state {disabled, enabled}]
                                                         [--source]
                                                         [--tags]. The 1th example of the child command would be to use it to 'create a localrulesresource', the syntax is: az palo-alto cloudngfw local-rulestack local-rule create -g MyResourceGroup --local-rulestack-name MyLocalRulestacks --rule-name MyLocalRule --priority "1" --action-type "Allow" --enable-logging "DISABLED" --rule-state "DISABLED". The parameter '--local-rulestack-name' is required. It is used to localrulestack resource name.. The parameter '--priority' is required. It is used to local rule priority.. The parameter '--resource-group -g' is required. It is used to name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--rule-name' is required. It is used to rule name.. The parameter '--action-type' is optional. rule action.. The parameter '--applications' is optional. array of rule applications  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--audit-comment' is optional. rule comment.. The parameter '--category' is optional. rule category  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--decryption-rule-type' is optional. enable or disable decryption.. The parameter '--description' is optional. rule description.. The parameter '--destination' is optional. destination address  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--enable-logging' is optional. enable or disable logging.. The parameter '--etag' is optional. etag info.. The parameter '--inbound-certificate --inbound-inspection-certificate' is optional. inbound inspection certificate.. The parameter '--negate-destination' is optional. cidr should not be 'any'.. The parameter '--negate-source' is optional. cidr should not be 'any'.. The parameter '--no-wait' is optional. do not wait for the long-running operation to finish.. The parameter '--protocol' is optional. any, application-default, tcp:number, udp:number.. The parameter '--protocol-port-list' is optional. prot port list  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--rule-state' is optional. state of this rule.. The parameter '--source' is optional. source address  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--tags' is optional. tag for rule  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. 