{
  "title": "dlink_config_saved",
  "description": "D-Link: running config saved to flash - d'link.csv row 9. Shares the 'config_saved' event_type with the BDCOM config-save rules for a cross-vendor view. Built from the provided report, not yet verified against real device output.",
  "source": "rule \"dlink_config_saved\"\nwhen\n  contains(to_string($message.message), \"Configuration saved to flash\") || contains(to_string($message.message), \"Configuration and log saved to flash\")\nthen\n  set_field(\"vendor\", \"dlink\");\n  set_field(\"event_type\", \"config_saved\");\nend"
}