{
  "title": "zte_optical_low_power",
  "description": "ZTE: low optical Rx power on the OLT - zte.csv row 5. Shares the 'optical_low_power' event_type with the Juniper and D-Link optical rules for a cross-vendor view. Built from the provided report, not yet verified against real device output.",
  "source": "rule \"zte_optical_low_power\"\nwhen\n  contains(to_string($message.message), \"XPON alarm\") && contains(to_string($message.message), \"Rx Power Low\")\nthen\n  set_field(\"vendor\", \"zte\");\n  set_field(\"event_type\", \"optical_low_power\");\n  set_field(\"severity_tag\", \"warning\");\nend"
}