{
  "title": "bdcom_epon_interface_link_state",
  "description": "BDCOM EPON: uplink/GigaEthernet interface changed state up/down - bdcom.csv row 10. Shared 'interface_link_state' event_type is reused by other vendors. Built from the provided report, not yet verified against real device output.",
  "source": "rule \"bdcom_epon_interface_link_state\"\nwhen\n  contains(to_string($message.message), \"LINEPROTO-5-UPDOWN\") || contains(to_string($message.message), \"LINE-5-UPDOWN\")\nthen\n  set_field(\"vendor\", \"bdcom_epon\");\n  set_field(\"event_type\", \"interface_link_state\");\n  let m = regex(\"Interface (\\\\S+), changed state to (up|down)\", to_string($message.message), [\"iface\",\"state\"]);\n  set_field(\"link_interface\", m[\"iface\"]);\n  set_field(\"link_state\", m[\"state\"]);\nend"
}