zotac/graylog-deploy
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
graylog-deploy/rules
History
byrsapty 510ca37e48 Add flood alerts, session correlation, focused dashboards, and CI deploy workflow 
- Two flood-detection alerts (per-source message volume, calibrated live
  against real traffic) grouped by gl2_remote_ip
- Session correlation: accelppp_interface fallback tagging plus
  radius_session_id/calling_station_id/radius_username extraction, so a
  subscriber's full session lifecycle is searchable by one key
- Replace the single combined dashboard with three focused ones (Overview
  & Alerts, Network Equipment, Servers & Sessions)
- Propagate GRAYLOG_ROOT_TIMEZONE and IP-in-alerts fixes into the reusable
  install script and templates
- Add a Forgejo Actions workflow (manual trigger) that re-runs
  install-graylog.sh on a self-hosted runner living in the container,
  automating the deploy step this project has done by hand all along

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-22 21:31:08 +03:00
..
rule1_juniper_ntp.json feat: add automated deployment scripts and monitoring configuration for Graylog infrastructure 2026-07-22 04:52:27 +03:00
rule2_juniper_ssh_ok.json feat: add automated deployment scripts and monitoring configuration for Graylog infrastructure 2026-07-22 04:52:27 +03:00
rule3_juniper_ssh_failed_tagged.json feat: add automated deployment scripts and monitoring configuration for Graylog infrastructure 2026-07-22 04:52:27 +03:00
rule4_juniper_ssh_failed_password.json feat: add automated deployment scripts and monitoring configuration for Graylog infrastructure 2026-07-22 04:52:27 +03:00
rule5_juniper_ui_config_error.json feat: add automated deployment scripts and monitoring configuration for Graylog infrastructure 2026-07-22 04:52:27 +03:00
rule6_olt_privilege_mode.json feat: add automated deployment scripts and monitoring configuration for Graylog infrastructure 2026-07-22 04:52:27 +03:00
rule7_olt_logout.json feat: add automated deployment scripts and monitoring configuration for Graylog infrastructure 2026-07-22 04:52:27 +03:00
rule8_olt_arp_move.json feat: add automated deployment scripts and monitoring configuration for Graylog infrastructure 2026-07-22 04:52:27 +03:00
rule9_olt_config_write.json feat: add automated deployment scripts and monitoring configuration for Graylog infrastructure 2026-07-22 04:52:27 +03:00
rule10_accelppp_router_addr_error.json feat: add automated deployment scripts and monitoring configuration for Graylog infrastructure 2026-07-22 04:52:27 +03:00
rule11_accelppp_radius_accounting.json Add flood alerts, session correlation, focused dashboards, and CI deploy workflow 2026-07-22 21:31:08 +03:00
rule12_accelppp_radius_server_down.json feat: add automated deployment scripts and monitoring configuration for Graylog infrastructure 2026-07-22 04:52:27 +03:00
rule13_accelppp_no_radius_servers.json feat: add automated deployment scripts and monitoring configuration for Graylog infrastructure 2026-07-22 04:52:27 +03:00
rule14_accelppp_auth_failed.json feat: add automated deployment scripts and monitoring configuration for Graylog infrastructure 2026-07-22 04:52:27 +03:00
rule15_conntrack_table_full.json feat: add automated deployment scripts and monitoring configuration for Graylog infrastructure 2026-07-22 04:52:27 +03:00
rule16_freeradius_login_ok.json feat: add automated deployment scripts and monitoring configuration for Graylog infrastructure 2026-07-22 04:52:27 +03:00
rule17_freeradius_login_incorrect.json feat: add automated deployment scripts and monitoring configuration for Graylog infrastructure 2026-07-22 04:52:27 +03:00
rule18_generic_critical_severity.json feat: add generic critical severity classification rule and update deployment documentation 2026-07-22 15:19:10 +03:00
rule19_juniper_chassis_alarm.json feat: add Juniper chassis alarm alerting, Discord notifications, and global timezone configuration for accurate syslog timestamp parsing 2026-07-22 18:48:26 +03:00
rule20_accelppp_radius_access_request.json Add flood alerts, session correlation, focused dashboards, and CI deploy workflow 2026-07-22 21:31:08 +03:00
rule21_accelppp_interface_tag.json Add flood alerts, session correlation, focused dashboards, and CI deploy workflow 2026-07-22 21:31:08 +03:00