{
  "title": "juniper_bgp_session_reset",
  "description": "Juniper rpd: BGP session closed/reset - I/O error, NOTIFICATION received, or recv failure - juniper.csv row 11. Built from the provided report, not yet verified against real device output.",
  "source": "rule \"juniper_bgp_session_reset\"\nwhen\n  contains(to_string($message.message), \"BGP_IO_ERROR_CLOSE_SESSION\") || contains(to_string($message.message), \"bgp_handle_notify\") || contains(to_string($message.message), \"bgp_recv\")\nthen\n  set_field(\"vendor\", \"juniper\");\n  set_field(\"event_type\", \"bgp_session_reset\");\n  set_field(\"severity_tag\", \"warning\");\nend"
}