{
  "title": "juniper_mgmt_login",
  "description": "Juniper mgd: management database login event (config-session audit trail) - juniper.csv row 14. Built from the provided report, not yet verified against real device output.",
  "source": "rule \"juniper_mgmt_login\"\nwhen\n  contains(to_string($message.message), \"UI_DBASE_LOGIN_EVENT\")\nthen\n  set_field(\"vendor\", \"juniper\");\n  set_field(\"event_type\", \"mgmt_login\");\nend"
}