5 lines
665 B
JSON
5 lines
665 B
JSON
{
|
|
"title": "accelppp_radius_server_down",
|
|
"description": "accel-ppp: RADIUS server not responding (verified string from accel-ppp source: radius/req.c)",
|
|
"source": "rule \"accelppp_radius_server_down\"\nwhen\n contains(to_string($message.message), \"radius: server\") && contains(to_string($message.message), \"not responding\")\nthen\n set_field(\"vendor\", \"accel-ppp\");\n set_field(\"event_type\", \"radius_server_timeout\");\n set_field(\"severity_tag\", \"critical\");\n let m = regex(\"radius: server\\\\((\\\\d+)\\\\) not responding\", to_string($message.message), [\"server_id\"]);\n set_field(\"radius_server_id\", m[\"server_id\"]);\nend"
|
|
}
|