From 597af280937aefb551aaa9603df6b802d9ccff10 Mon Sep 17 00:00:00 2001 From: Kevin Krumm Date: Tue, 7 Nov 2017 14:21:37 -0600 Subject: [PATCH] alerts: Added in dell server sensors alert rules to the collection (#7647) * alert rules: alert rules for dell servers added in dell alert rules to the collection. * Update alert_rules.json fixed the , * Update alert_rules.json fixed the "rule": * Update alert_rules.json minor fixes and added in MAC address alert. This could be useful when searching for missing devices or rogue devices on your network. * Update alert_rules.json removed mac address rule. --- misc/alert_rules.json | 21 ++++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) diff --git a/misc/alert_rules.json b/misc/alert_rules.json index 0cddb53ac7..46f1aa052c 100644 --- a/misc/alert_rules.json +++ b/misc/alert_rules.json @@ -269,5 +269,24 @@ { "rule": "%devices.os = \"panos\" & %sensors.type = \"panSysHAState\" && %sensors.sensor_current = \"1\" && %sensors.sensor_prev = \"2\"", "name": "Palo Alto Networks passive firewall changed to active" + }, + { + "rule": "%sensors.sensor_current ~ \"[2|6]\" && %sensors.sensor_oid = \".1.3.6.1.4.1.674.10893.1.20.130.15.1.4.1\"", + "name": "Dell Server Raid Battery Failed/Degraded" + }, + { + "rule": "%sensors.sensor_current = \"2\" && %sensors.sensor_oid = \".1.3.6.1.4.1.674.10892.1.1100.32.1.5\"", + "name": "Dell Server CPU Status Critical" + }, + { + "rule": "%sensors.sensor_current ~ \"[2|6]\" && %sensors.sensor_oid = \".1.3.6.1.4.1.674.10893.1.20.130.1.1.5\"", + "name": "Dell Server Disk Controller State Failed/Degraded" + }, + { + "rule": "%sensors.sensor_current ~ \"[2|5]\" && %sensors.sensor_oid = \".1.3.6.1.4.1.674.10893.1.20.130.4.1.4\"", + "name": "Dell Server Disk Array State Failed/Degraded" } -] + + ] + +