{
  "title": "juniper_ntpd_resource_error",
  "description": "Juniper xntpd: mlockall() resource temporarily unavailable (memory pressure) - juniper.csv row 12. Built from the provided report, not yet verified against real device output.",
  "source": "rule \"juniper_ntpd_resource_error\"\nwhen\n  contains(to_string($message.message), \"mlockall()\") && contains(to_string($message.message), \"Resource temporarily unavailable\")\nthen\n  set_field(\"vendor\", \"juniper\");\n  set_field(\"event_type\", \"ntpd_resource_error\");\n  set_field(\"severity_tag\", \"warning\");\nend"
}