5 lines
378 B
JSON
5 lines
378 B
JSON
{
|
|
"title": "accelppp_auth_failed",
|
|
"description": "accel-ppp: PPP authentication failed (verified string from accel-ppp source: ppp/ppp_auth.c)",
|
|
"source": "rule \"accelppp_auth_failed\"\nwhen\n contains(to_string($message.message), \"authentication failed\")\nthen\n set_field(\"vendor\", \"accel-ppp\");\n set_field(\"event_type\", \"accelppp_auth_failed\");\nend"
|
|
}
|