{
  "title": "juniper_asic_error",
  "description": "Juniper Broadcom SDK (PFE/ASIC): L3/IRB creation, nexthop/ARP, or VXLAN hardware install failure - juniper.csv row 10. Built from the provided report, not yet verified against real device output.",
  "source": "rule \"juniper_asic_error\"\nwhen\n  contains(to_string($message.message), \"L3 INTF creation failed\") || contains(to_string($message.message), \"brcm_nh_resolve_get_nexthop\") || contains(to_string($message.message), \"brcm_vxlan\")\nthen\n  set_field(\"vendor\", \"juniper\");\n  set_field(\"event_type\", \"asic_error\");\n  set_field(\"severity_tag\", \"critical\");\nend"
}