Commit graph

  • c382cb6b72 Fix DSL string-escaping bug breaking compilation of 2 A10 rules main byrsapty 2026-08-28 13:29:20 +03:00
  • b0e4095cae Add A10 ACOS (LSN/CGNAT + BGP) pipeline rules from real captured syslog byrsapty 2026-08-28 13:22:41 +03:00
  • 7c0738d68e Add alerts for the new BDCOM/ZTE/Juniper/D-Link event types (rule27-84) byrsapty 2026-07-29 16:54:53 +03:00
  • 98359c7ca3 Add pipeline rules for BDCOM EPON/GPON, ZTE, and D-Link from provided log-signature report byrsapty 2026-07-29 16:32:18 +03:00
  • d76f1e766b Fix the same update-gap bug in step_streams()/step_dashboard() as rules/pipelines/alerts byrsapty 2026-07-23 21:00:06 +03:00
  • 32f2a922e8 Normalize list order before comparing alert config - fixes flip-flop update byrsapty 2026-07-23 16:37:27 +03:00
  • 19643a74dd Fix false-positive "config changed" on every alert, every run byrsapty 2026-07-23 16:34:32 +03:00
  • c1361f16c9 Fix the same update-gap bug in step_alerts() - alerts weren't updating either byrsapty 2026-07-23 16:30:43 +03:00
  • 609ac74574 Fix two bugs found live: pipeline/rule update gap, and alert7's over-broad query byrsapty 2026-07-23 16:28:50 +03:00
  • 31258eee01 Add error/warn-only Vector filter + 5 new pipeline rules + repetition alert byrsapty 2026-07-23 16:20:13 +03:00
  • 624db7510f Refine DHCP filter to always keep error:/warn: lines byrsapty 2026-07-23 15:57:29 +03:00
  • 071d92000c Document Vector-side DHCP filtering to cut log volume before it hits Graylog byrsapty 2026-07-23 15:43:51 +03:00
  • a24defe596 Fix wrong baseline figure in flood alert docs; document cold-start replay byrsapty 2026-07-23 04:13:18 +03:00
  • eb6225f2f8 Let GRAYLOG_ADMIN_PASSWORD pin a custom password, add cores input to CI byrsapty 2026-07-23 03:37:03 +03:00
  • ab3f560d4a CI: pass GRAYLOG_ADMIN_PASSWORD through deploy-from-scratch.yml too byrsapty 2026-07-23 03:33:23 +03:00
  • 7274cee1eb Document all four ways to deploy: manual/CI x config-only/full-recreate byrsapty 2026-07-22 23:40:59 +03:00
  • 5316136eb6 Fix real root cause: password-extraction regex matched a second "password: " byrsapty 2026-07-22 23:13:09 +03:00
  • 9cdef5d521 Bump wait_for_api_ready timeout from 60s to 180s byrsapty 2026-07-22 23:05:52 +03:00
  • 3aaa1c96a8 Fix bash syntax error: apostrophe inside \${VAR:?message} broke brace matching byrsapty 2026-07-22 22:51:51 +03:00
  • 63e6ce88d0 Fix startup race: wait for the REST API before the first authenticated call byrsapty 2026-07-22 22:45:28 +03:00
  • 71ba82e0f0 Add a host-level CI runner + one-click "deploy from scratch" workflow byrsapty 2026-07-22 22:40:20 +03:00
  • 83a3388d41 Silence locale warnings and auto-display/delete the one-time admin password byrsapty 2026-07-22 22:29:31 +03:00
  • 2510bba21c Add cleanup-host.sh to revoke the AppArmor-fix sudoers grant after deploy byrsapty 2026-07-22 22:21:04 +03:00
  • d98a63c0f1 Automate the AppArmor fix with a narrowly-scoped sudoers rule byrsapty 2026-07-22 22:17:02 +03:00
  • 458aada5a5 Add setup-forgejo-runner.sh and document the full from-scratch deployment byrsapty 2026-07-22 21:55:29 +03:00
  • 3e46b08db5 CI: authenticate the deploy clone so it keeps working once the repo is private byrsapty 2026-07-22 21:42:36 +03:00
  • 0da7aa5a14 Document the Forgejo Actions CI setup in both READMEs byrsapty 2026-07-22 21:36:59 +03:00
  • 32ccb22c88 Fix CI workflow: use plain git clone instead of actions/checkout byrsapty 2026-07-22 21:35:03 +03:00
  • 510ca37e48 Add flood alerts, session correlation, focused dashboards, and CI deploy workflow byrsapty 2026-07-22 21:31:08 +03:00
  • 0db85fa860 feat: add Juniper chassis alarm alerting, Discord notifications, and global timezone configuration for accurate syslog timestamp parsing byrsapty 2026-07-22 18:48:26 +03:00
  • eed2de0571 feat: add generic critical severity classification rule and update deployment documentation byrsapty 2026-07-22 15:19:10 +03:00
  • 30d8512146 docs: add documentation for vector-accel-ppp setup process byrsapty 2026-07-22 14:43:06 +03:00
  • 06233065cb feat: add automated deployment scripts and monitoring configuration for Graylog infrastructure byrsapty 2026-07-22 04:52:27 +03:00
  • aa5cfbfbd8 first commit byrsapty 2026-07-22 04:51:39 +03:00