{ "title": "bdcom_gpon_dying_gasp", "description": "BDCOM GPON: ONU power loss (Dying Gasp) - gpon_bdcom.csv row 2. Shares the 'dying_gasp' event_type with bdcom_epon_dying_gasp and the ZTE dying-gasp rules for a cross-vendor view. Built from the provided report, not yet verified against real device output.", "source": "rule \"bdcom_gpon_dying_gasp\"\nwhen\n contains(to_string($message.message), \"GPON-ONUDGI\") && contains(to_string($message.message), \"Dying Gasp\")\nthen\n set_field(\"vendor\", \"bdcom_gpon\");\n set_field(\"event_type\", \"dying_gasp\");\n set_field(\"severity_tag\", \"critical\");\n let m = regex(\"ONU (\\\\S+) Dying Gasp on GPON(\\\\S*)\", to_string($message.message), [\"onu\",\"iface\"]);\n set_field(\"onu_id\", m[\"onu\"]);\n set_field(\"gpon_interface\", m[\"iface\"]);\nend" }