5 lines
481 B
JSON
5 lines
481 B
JSON
{
|
|
"title": "accelppp_no_radius_servers",
|
|
"description": "accel-ppp: no available RADIUS servers at all - total auth backend outage (verified string from accel-ppp source: radius/req.c)",
|
|
"source": "rule \"accelppp_no_radius_servers\"\nwhen\n contains(to_string($message.message), \"radius: no available servers\")\nthen\n set_field(\"vendor\", \"accel-ppp\");\n set_field(\"event_type\", \"radius_all_servers_down\");\n set_field(\"severity_tag\", \"critical\");\nend"
|
|
}
|