From aad821c20755481c590fa0eb1ba202419b35bb13 Mon Sep 17 00:00:00 2001 From: Kevin Krumm Date: Thu, 16 Nov 2017 13:58:58 -0600 Subject: [PATCH] docs: Added alert rule mapping doc (#7748) * doc: create rule mapping doc * Update mkdocs.yml * Add files via upload * Update Rule-Mapping.md --- doc/Alerting/Rule-Mapping.md | 20 ++++++++++++++++++++ doc/img/example-alert-rule-mapping.png | Bin 0 -> 18337 bytes doc/img/example-hpe-rule-map.png | Bin 0 -> 3406 bytes mkdocs.yml | 1 + 4 files changed, 21 insertions(+) create mode 100644 doc/Alerting/Rule-Mapping.md create mode 100644 doc/img/example-alert-rule-mapping.png create mode 100644 doc/img/example-hpe-rule-map.png diff --git a/doc/Alerting/Rule-Mapping.md b/doc/Alerting/Rule-Mapping.md new file mode 100644 index 0000000000..fe390d786d --- /dev/null +++ b/doc/Alerting/Rule-Mapping.md @@ -0,0 +1,20 @@ +source: Alerting/Rule-Mapping.md + +# Alert Rule Mapping +Alert Rule Mapping can be found in the WebUI. In the Nav bar click on Alerts then Rule Mapping. +In LibreNMS you can create alert rules and map those alert rules to devices or you can create device groups and map alert rules to those groups. +This could be useful for alerts rules that you don't want to be checked against devices that may not match with your alert rule or may give you false positive etc. + +Example: Alert Rule Mapping +![Example Rule Mapping](/img/example-alert-rule-mapping.png) + + +In this example we have an alert rule that checks HPE iLo Power Supply Failure. You probably don't want this alert rule being checked on none HPE iLo devices. So in the picture below you can see the Alert rule is mapped to a Device group that was created just for HPE iLo devices. + +Example: HPE iLo Rule map +![Example Rule Mapping](/img/example-hpe-rule-map.png) + + +### You have two options when mapping the alert rule. +* First option: you can map alert rule to one device. +* Second option: you create a device group and group all your devices together. [Link to Device Groups](../Extensions/Device-Groups.md) diff --git a/doc/img/example-alert-rule-mapping.png b/doc/img/example-alert-rule-mapping.png new file mode 100644 index 0000000000000000000000000000000000000000..8caeb851f701bd3c135e091e032531428c3d4e57 GIT binary patch literal 18337 zcmeHvXIN9|+AfZxs3;6V07bx&YUrSV)IkNL3rXk!0Rt+%cW^{R0*KNP0i`E_&}$GB z2neAly#=I8r~yNVoE3Fu&+K!)v-kPF^K<`@T&(L|QbL{3$v* zx-*)$ZW_|j9dD(hJ972JPr#8YRFo(1am2$=<2oI->%s!?%g^?zx~g<^B{2;9*2jR~ zPrBYR^`N6;Y@+=;((00bmyS+DM)RgB)Yo#E_}&FHxFfrED0|biEbHu9hD;&otsLuP zZ#etTV4&A8=Nlel@M+??UGz&N^7h+O*05t2!;JH_*=||9WngH1<97aBRiZ1`k->)( z($e;JT^(Z%6E!6fB`Q2zlQs6~8?QVx@q4%lAF=%hEWlLgUNfOC(LO)MK$&TuUo_As zXrEtsVL#J8cT>b*7WDxOUl)4ILbuP-4$1vSg1Sir)LLUYZqo+4egtKlPW9gQusKwv z^blva&wf5&XQ>vY-qWV8MTQKlyyw6sfLk`$R$cbpa*)7ZnDO2?nh9kdvL{ig$%TiG z0V;=UoGD;77l{VF!;J7xNs_;J>|}A%(S3fcsdCXSmMNm≪4fcV&Ud0JH~veUn^j z0NtYZ4Z*8O+Ap$V(?u<6_o!we+x#!!)A~cqA@3^fvWTaaT7r(&?jKdy3E@_U3wSJ; z16TC<;Vor$8P*MaUh~}iXM+qejgY#psw_jsXq5$|3Mf+LTJK^$Ioyhpxe;!EK#y=& z!JYr)&K~7!RHCf&@tVsu#5QD2;m`c1f#tYxp|d-z z4f7(yQyOpIHJ3;D#3P=%NH^}##uK~{+2Z+zHlIs79;MYC!m%SQr51)&8|qXCQGDbS zqE3WgLwwwM`cNzlxH%7%&>(s?abe)k4wwhjgo`DW>v)jKrM`uLYi0 zM3w#Z#cjcRyYqKtFgmo^37az!3vZQi5Uu2*1Ry@73sD;)k(s9bdi-|Q&#HNI+@48AgHgi1^edCpu@J`0*i>ol-diosX>nP+VtG@kUqguLW{b z3&$Ef4oA|aq+J6$it9klFzdO`$?#4Z5Gd*I4lC8r92r+SVsZ2_vF56!4}t~8oD>sH2rrwN zdej7fNs2xR<(1JAAVfNme8{TW51$=<4z^?WVgw05{8SH}hG%hQ!{R<=tq1LQP_fx& zlie#)cBGrP+it$)6BY;gXpEm)$MswEqx#TTv%6s|OKid$5n3C1L8eu@Aaf{M7ZW)n zfBz*(Cni4zLQKiuc~EY`5}e%#U8GZkUmY%7P3HhgR%@ldk)*Or^8Ayw!q+9>6rQ4c zhDyFBQ3Xz=2EW)gmr^S!FxBAe4~bVy(Y`KrllVE;<;{szFK0xSK6*QRegf+(5~N~b z$#uBVora?fwLvABo;(uaJfFgR#;%E2=e@JCwB+cPatecv7srX6ina853d2SxY3h2J z8uL?}(#$pUUJvuWy4Fz9@9cJIVYF7-23#Y3y&oK(po;<7CVJ<#@?@@bDO6zMk! zu2}^qN!*2vn>w4dhx+4%JXe9mUNS#0#B+?ptn?X6aUKgBPjWu~x?pidGhIpKDx`63 za_)V&EO&g!$?2adH80}m6dWEw$>SYaIivdFrW9AF6_-NXaIyp}P}wA8g9H=u-6O#` zQd1`fDM?mU1Y}7T$|e{-dwbZ6H7}79W%3rBPyk-FugJOU$DiTQ(R^T2v;@Owte1ii zVG7YHA9=3@`8hN@zbRI{rTn7q1+zxMgoa~Ed{SzBdzUKl(lt$-a@VUH4ZHnkt z*P&%opg^jS^K1~3V3_6g)@PXSg8*(GojPYm;bj8~%idttOve3ZA&|*xXo*<8NBu2O z*(=H1;NijnmdIfu+7HBNq|e^6t9LP3EwQb`h|)HxggLQPyKIPGx{Ocg&qyyS91E5Y ztf~E)=dCIu5Nt$Fot&E+rBJFCF)o&c4VDvQ79sl+-nthQo`YB9{l2vU^gW3vn{$`v z62wDH6sdzosu$iG;wL|oUDrAzb6TmK1==)hp!<9vtqgNiM`EalgydV2QK2tsC_(q` z_bXzs{prtn3H=qCm+%tb!NT=nls3qo%~Fv%X*GCUyfT`#=}Q8*^3W1bEq9oD{{2ku ztDC0ya0~;%fk8isHY8aNR#z&s9b65KVfVp$KKRE#G1$^o0XF>C*WbjW|)U-xP zY#x|BWuuo;|KTgKRV7r3Wc9II?iw92-Vysdk zm)$4Q6!vD~V$3gF7rhXrF6lT9#(i&!ya!`2ivY54)%$LI3|oXm6-)dHPmvjEe(vkd z`z2YBC_%xHGT#-)duRWI8=p73hwfJ9BCl5V2=DtC82)L>-9_oZ^3l=hh-iZ%UB5M8 zcdq|^OdZ4FnR~P`cMMgq*bq;zmBA#c+m}Yl<(3zOs>XEy3kgn&0h`3t?%;skzHjpg z>&;{9PCH2hqwlw(828L7ZSV7jxXS(%2Bl#Vyx(r&m}IW#GuI}_BYwD21&MLosVOUg z>wo|9A+@GKmuD9B-#{^3e7vCk)Pc9H?PM>6hMOg>>&>24Vah|OsXLormo8eaCePxM z#E9@`;@%y68cwSgg(unH8|96p-2kA6?)m=(DNC5mVZTDEKm3HUa8pP-X=Y&jC02YX z#Sm0tJjs=79=&A&o@gxh7JSX=*OxfZ6*@fCZ{(6+SEUdRfaPY5hHU*yl*%n-#gOGm zEjNRpl-y9fa50w>!K6y{g$&(LjV98Ccy-iMriEkMZd&w)l45=55Z_Z;gW zz+XC;O~S{_nv24?`0mbNc+rP;3)kKs#H#2{nRN{vnmcM3h zF(6uWo*ofYimkcf_{s7Y8b0~Vzy2iS_d=|DzMX$LL(M6RuPcY71hle8?=O`h`|UrI zR$(F=@0nY&kqd+s+bFu#q&7o*fHZ@+Ot?c8HMqz_m@~)_ucAox_Oe~rn_MTYWrVDZ z6}CF(B4OFkFJ0N~xMlRmw}HeVA(jVm5xzJ`e@eS$mr)4f^HbaCYxjF{>l~p1;xEn1 zH(hSAB_t8onH2;f=2cIVG!3rUm>s--vlg zU*HyKwNufo_P{e4#xyv0I8d7!eG-D752eT!S%y8T0)CX#oC}7B?0De{I97q1tB;-~ zU9BmtH%$PA9U3@jV&rs-r=S)+a@Nm5+2I%;p6#VcF-!lBL)} zd>#vNtFPL;{EOI^`p%WE!jSZwao)lLz4*aImBp7!tA>v8H`A7ZJsgVBKqm)Fa8u8G zshx|Yk6Ay=N}{WCsniCQ<*^zYh4|N3y6-Kl&60XDMve_9Z=2#>o}{L_3=U3Ui|YL< z4*i2XJPybqqgUOQenWpy=+h#3_c?C@j~v~dQ|7ryM0T=q{k}DM-^%=$+gB}6cxY?W zds*>BZmLVM7%Xt2zk8?cfL5~@pOH~E(uNiXTUISMk=D1qg9zQZB=DizT5mgPgztq7 z$M=#W_ghO261c1B)U_gqQ1(%Eq&4uD%|nW&LPoB-eLwR~%=x{7siyw0*^00{ZQ2l> zS71w1&Oj9lbZex7vHV{KCV@B4v*aO_o_sIin?iqQBVVkycRPUsYQ{XtI=zNZ1+Zab zxuvBsFOPP_c5)`-Bl^p5KmQ7_I93XmwiMgd;JWMiQon%kbS@ir4&X0J?CwB`&VPRMAJ~O2o2%>~}E4-3|(= zDH3JV+d7!NLkc_gPgDMPNY*jx@hh~Imq76t531D4Z!Hq2a-NgBtkVGLvGxO?X;vm( zX>VoAzCkJI!MAxdE)N1+qXZvu zcrEUNm1B|p&g0`{dG_>V|5uw`{V!da9lg-RYqXiaOLqkp?GG|F2H+V`eUQvAo4u9# zQ8v6+(NgKIFJ@J1ro81@%42gs@>>l_^MMWX8nNNpZFab7=%A_OnB6tUBNm#km(Jio;2oZ51_KhCv12awz0x=0gjU72?>^mu z?b(+|tUlM}r*bKb0;t@O>;%DcusWxK6Mb+fn=d>n+Ev^xKl@Gq4723T2S?I#L5ta6 z^*5yra`g>Nt%`&nugoq=iD>cb+L{`|ECrNEhrBX6xwQ(%ycRQUdt}E+oW=(sIh#N_9#AE%YXachWd(!M2#j@go zK~467v``YP0`FCN!|x;=-Trk_UlGSL)D5v>#;x!qrMv*d{7f4}a8aj^1_UN0&x;wb zs5X<7XeX|@cpr1v0-=zz+2e6$wS$Ns8IU2Q3d7CJd8YmN?xC+ytGf7>g9_2?Lfd zJMHPMliX7`d+sztKW<}wCWQ8J!i*^-QaKSd6MZ*n@(Pj5{OT}b>u#Hl*R`pidCi*% z*+S<_L|F6GcsJ2v1pc;e69^mzHy;G{sJQc}%WoQx9ArA|=gqj2G-QoQbXMWA>u;*4 zX{cDSvu%WuckUc?VvOH>Ud9+(J32qH8ng-~iV3&ibV1XhHZ}gb*a8RM z-qCD1P|_7Wj=RSeCP`e#g>@09Wo6!Ow%m4n+w9MINK&Gz>21-j!_0Se2*X52V>=2b+R*Y z&mL%qAMu@VOaj~KU&a<3ehqY*-Rzwt^yjElFqBG?%a9YNWn}@3Yk*q?Z9F)j?9R>Y zPE#u#riOlpzOcH^RSi?u;WuL*E%(mvyoDR)1nSY}pmGG-L>=ijOW$!35wu@Ndk4#)_B|c^ahHM`!C5d^Q2%P-WO?$!mT%obnGO zzyhcPkST>g^4uGS!8{IYYZGpubk{`NceAMg_%Rc)W2=$Jp|5vnM;;sgi;lN?opLZ+ zUuhyo+)4^Xv9tZtlryZ9X#A5d*(4FnHu+7le)stAV|>~7If1GR?CI=a3pn))X{<<` zI{l5V0jw}=_Kl`v(x~s|5^f^nVDl^L+dLTZ^Z{67p@EC$x8CHA4_AZy*86#@;BCAy zB&K+OJE3Mstjc$#BTir0a-Zmu$3496VQ>2k^tbF27z{ev=NuT zw-F2Vr$k|aRRG$BYWpNjFCHeYTJByWw4RuM$<@3VQ66J(b?A_5rAvV}^&uQ1ym}mY zB9DVM+f)_rauBngn`MAwWPwjTJU@(2OFp z37qad-=NeB4)Fs&QGr?@R)Rqamg+SxNb`tV@>H=xt|iS@>tHmNt3Z3ecBQW+yxqqD-; z<8tmtOY1oZj++-v3`bCc1C}T7+cvR2)e5V?HEbV?(gj6E)?H*c6_+A<3-o)?(r%NK#+6vy>n()*zY2e)@z1~7D1+_2Dg`gaY5J%kvNHq#}a1fW{Lh= zONgNDI&8fuPoY#mRo&=NrB{7+hzNr;xjHRD)zFIQ)G*1cHmnfYU>`d3e0I;}6>eX* zfK8|ThNP(|)|o${M51HHcsT>#Sa(AvVPA03kqHowL`QRxl0swhFp*Vn2>zo=aH6x) z_=≈dzwJ4d$7?HvQ`MxQr$H%%^c+M9^F8FF;Ku{Cqj#N;E4t@8E0Ox>L+oLw` zdybOMe#*vT_o*TeIQiYgV5`8Rwsg)m16H7X)HtNbCWYylgaAy(%A3dbXWs^$MDTd3 zsc*?O3*5n0K$`jRmpJg@G+)DxjCkI_;hLat{stREB&PETsylmUEwa zmh+kl{HtZQss@OTI>}&Vo`MEH3YfJnhysr4>|9&iB@~S!@V-?jn?QdNKo=={ce(ZKmFPNqx;oIf!?c)m<|UZJ9zr?KYiK z)uoczcJ&}bBXDl5nr7bDk7Q?CbiRZ0+XF@#IkQYRV)K~gESR`w8g~FkM#tut0nE0z z>gz2~FH_5O!x8vkAo;Vwc*xhY0KfM}*=)v7wUhL_2aNy(uD5{iLU0#3SyV9Fovt1m z%e%Xylz!Qw0jnYxXROMh3r^q}*DVlJo%}BW)VG+e9<3v^63KxeKue-nH`DJyP>9d=v4{}u)1ge24Qk#Yg0Q+)LI$e5~pkq^&)5qWea?m2WJWY!M5^Cy1~j8 za1%>&-`a9uNJ}$nDxu>2R#T3DUA0FJ z5Gb(c%s@&L&W<91{%G0}Hof!{g~;@`KTh@u0`#%a?gq!4$8Xhts9bw1W5a?Ofn!=H z1EL*w?Ct*|iUBwQaGMo?{(ZBZ9*6x&kj(d&I^yC4=VG|hY!t8UqymQ04WJ7DAUt&p z{aZPrH$8|Y8IxEdU?Iog}|Z5|@8lq-B!bpE0)6210GWAqszJCp2I zx=M}f0OL$=0a;1X!;}I&5is3 ztwBf{SSGW?TQNb{IZs+uxcU@)Jxoa&Q(UkvR*LZa@+|%KRETC1aoQ9EAJ=T6ba#t4n3AogYB~ECL(8fXte%)CXcKTr2eqmrb znr<~UC><=*cLWmrB3#?F02;1SW7Gp37+gH{CSa%bS;+&jqtz6kl(h(nY4N@}kf`c=Ua>c?tT6*YvAxViOXS$Za&VUbXoYj#=csamD=CVduM z&aweHRkp1wDFDFi3E<{@2$`=7w6!0(2HZ3#b6CG*(GoVh_aGx{MFtJvkWe15kEH&` zAmhld`CoIVBX5~o&-?TgOGLCztq>1NOWna1Rp$H*?SvOfBWi7^TA#SoS;Q7RN=(Ze zdrBSZ-NkI#`jP}TO-u*0_}7U4AvJQSF`9u6$YM$}KdO+jq0v(haGo+&J&e_*kG{H6 z81bHdiOjJ*LzzUyxL0>>X0@QEN4ipQY73|y+h#UmoY#a&p3qkvCM%auL-l5(iW;!E z0|atb$09>BAR7lfg#SNbWEj?&?QEZ*`YWv_1^jC_XhMYo3Bx5`rrAHmtQerK+ALI>`oUA_MU5NW7%kZrYD*HYQJ-; zrVQxk|8SGW!$^CCAg2=7+EsCSh`7iPp!;LWDh>X$MWvG{5rK&`ev4Z?Jo)#_S`*ur zeN8LF4>b>}YY#v5*H~E{wtgdAfDCtv06>*k6?tjcr$J?Jc>(fm9&CCUW{N%ne^DD( zqPCO6)|@9JZ=24r@%cm%QxEf#SbJ>iVJ$|iO}^%6DPzd8)w26T8 zn~S(tBI2(Kzz-ailG6ewJxgWX7YxTF748)i%qw-%L3);e>a>Q9{y%e zNKAaA=AmljeK{lbpw{w50_a#jBiYFNNoM`9Qb3;1DqG3aI&l~mN-E%$Z;o&zIr~)w z9);~>3l`kfxMfe$)5Pqf56XPa{pKZLD{R82I(-;`hsdE)7i4?8+6!$mzMPAE6S6Nt z^si(798}f~!9Tf_ioR3;=G2a>yr>S(DXq6O{&2Q63)sO@JQu8W(8={n$}K0>f>T6bb+Tn^HXha9d#hXWRi&Q;;eIn%Ea0c;)^V~FT>ho`Vlz9_BjVMro8QG6VQq+RsPRh9j4~lSXU9qk9z+= z^ghUVG^cFm?^MF+W`;?XTDbqG{B>W4oAWIvg$o-Cu!bT+!svFifU@=Q{j-*d>MOuj zEbjFO954E5^29@|L%r{s(5j06$#;8pIH+WRmK%bSH}4=^mBDC*6+1w|pGQYz!1nE` zYj(VY4wiRGsm6;%gR-)NJk%;UODkhGa;eT}1)%?cQ~$5ktS!RDok1w=@s+FokB0Rh z4QnO>(69~&dC1V=UYcct?=Jrlio+{Z#H|8g_4zZ0;`SO)e~%9}{Fee2-?tp8=PaE6 zu63_FhVN|0vserJq|o69c6HhKt`CfcTEW_-r%Rwt90Iro2fxr=ot?(e7s}7}Tnwn= zum&c|s{49F*gj>Tp=NcgdJCXf^!@uCfb0uO3Z>`C9W=cS#H^MvDNaHcFiO62>c9BuN?Zy&u% z(+#>_WpvTx0?O+P`flHG$Js$&#?(!gHTaN>UYgl--o$<$Ex%W-WyqgN~1{_TB= zr@0a=LzoDDn${GP58{9+B$B2pw6lscD>OdMIO}lJmz9NK3~yRQu)-q?RpV%92>%ubq>vpJO@xDxd$%2Gxus`L|y8M0z28~pY zN!$ezVmeX#69A1Lzi(u;HSHI>C9$qlvDmr{;MLv`kgnK?3j#s{+=}NFg^J9{Q^4Ku z>9P`5KAYDqlb8_~d9x_^Rk2BWAv*J&#qc%1wc->enVzPO$NIWYN|`ln*t7)Z+a{JO z_EkSPFi}^dNiSN^J4O^?+wRjBSoh>$r(^qaPQlv)v+FuyOuRm|pQm`(eIV=*8T2f}62b=A>AVXzP5mm`51H*@Rx_ya*eOeHkBn2B9vsXAZ#`&R8N7}#GlnO@ zhB2g&6E&OlSxjbL1<^t}^Rc$sg6)XB`we-_Nm*OR=pG(8?M&{7RHkN}Y+xIl9F%&a z4Z&Z!#~|&;k;M0e__=85qvd$|>ZycI7umsZ)TIWgX2*7J_o!p|_puL49b@~U4wx>o zP3kV${x~D@APqc#e8tBAIg4oHk+AKQ;fL?(8M8w63-{$VRt&)WzJ8IGA!AePjRRD6{8>Jie*9qkj1 zB{pIthF?XhQ_gsVP3cuLTd~_~?)8o0A6W#XqOG5AUGR&CiriXMFE|Nl+XGwjs~2J? zTrP-WqsVj|uz5m=DG%NW0$t z_oT((VD!+5Z5w~7O9J2^$cd8fBsZis-w{8!cAd01+(U>-g-ue_)L}^l62=eAV zW`;#f{+Ab?VDY%=grqiT>(liC@<`*dZ(^-$bL_SXVO?)~SpLQk)}oA}s&PRwZE;1( zM%D1jdO<%>5#@g4Mo_ynJJz|0ALkv79;p4d^&4yEuK zCco|#Gtc;0*6V~(VNp^xB%%7E`DpTq>!v%IwFQf@jb`pR<$Lle*i##wvMi5l>?T^s zwlQ6+PNnFV1%&BBgTlodx#%2(Rw_(==h0Uo;zTmqL4I&VXu)J$7?YYnF(s7^1}VTX zX!lSfwc9RSt6>q&{U3b#3UtPA?D?Q9KKknOk~F^64&v*bA{D{zDS$VYMecgIljSDe z7gu4YUmDmB^L0x`8mz)J6^u=-OYio{zFsVB%J=TR-X@o#5uWy&go3418SG#Hcvc?$ zH#3jeS>_0HyRrR%FG-9EjV_4TzU5^2gFS|kkX2f8eQ2>#2Sm6fSroX_G_})Ed1?xX zEi%%_gonCViYOgU+&Ku+1GN&;xBaQ1c&mN5$i#B+`~CTRp5{^UlVgVg8niwuz%~#) z6vb*xJxG%Ld&VW?!hU&at&Ha1W!8?y$a$6h#gWhWN?84&JT*B~S_+mkkSIImh5j0#O`SQ=bta3?DT(2sXmNAplq1MzR_cyTYnq#(C2-_ku$WDbVxw_21s`v z?5?W-&4@By4&bbRx{&pI2g5G<882z`C~@8G1H{t5P;>7=GRA`^@NhQVD)1`hk6b8_ zj#1p1nZ{2Xc#~d;s`$wKBkFVSM~VnA`)Dbme&aVk#A%uz2#C|kE0~W8>3_UUz-azM zP|d7@D*}0JIy%Qmz@Ypi;8Fv4lIB4Ah?hpv(S~@tyTYDb(|$Q1s^%LZw2Qe z@4w&xw7Wan0Pe1I^z-oXq&IB3@^_3kK!WJfBQnr)_9T6LTddhV7%0%|F!gqdXx91SN?=_)Dd`anE($vvslJN|XoGu-laaE-ePcF7SvN77*EB{LuRK8Wnjx?CG zawuIR7R);-E4wih4{xY7XufF~*9$UMffJm%@VDXCKhS0EoUMXX@r zOgxR;PzKv4assd@YnxiOJ4|vCK=An`;)n(696;d83!(Zsrsj?YbI<#A1Va}G25g$p zE=mapr*VvSWmYTWa4}06etS{z8>VCEF_EAf(LQG}?xy$6I9RQYx#$8rbIAorbeuj^ z2i*IJmAHuIl${hXOvIy!&rhVNN)Ln)pbKcaODpJM?5Rx^qah80H3`wmfX|X1f~zh0 zdf@8kwcV}avobI}pNBN%GeX!**4`R!@5AKZuWDW(2hA@{xN9ax z-2!Q-U^qOQmQJ>Mqm!}6hK~NfMHzwk_}s8r;Q1o0<=7cfEu^~QgX9*c*^w?J^Im-A zlBGowT%ArIK^ z+D_Sn8qPU8*TbzsaP_-${kw~l&Q3}z)oHM~gco&5<%XagKo&l8VKQJp583{U;toew z+n-Ta<_3EDcR1jsq0NH-L>T`QVf+?hT=hlEB`YZ@JRMYU+*!$?#W^C0QnNcgWG9-H zx0bH(U%e8BhL)TgPAF>Z?#+?9%GuEp@j7+=o21M5^c!s?F~xq1W1O{H1xPDhcQcdL zhBPH_>aM0}Ir>z+e27ZdLylB%V#()yo%COo zYYp&`lheJSdiRpmkZpH;cRm{coLrF69nB$bTP0<(kDJ$_B`3PaoaVuLSj`6=)O`ciYM;pAr?kgw8^}S*O<|)Q-pk}b|X%x>q^!6 zEL^SE<0bGy-+eQfu}@`neprz0eD&bd%yq}MbJJ3^%=cYD-s%W6Q1nVxisn!OB^lhw zNx9C3*g^aIZGWV^Hsg?PmPFZ{X6db<3wZatCWufc!Z4`CYgoo?YNiD9(n&41ixp)c zj+pfqkMQr`n&r&%z-vy`el5luSM{bC60cnr!;ac(cS)B5wddX80MO`tcIlhIB!5v( z8A?ydKpEntWOZU&*ZmivB@ccomi@OWN%E`>Oo9y?StoL)%ia2tX1Ds?`+qIgk|1{P z$k=CvgyEKnBg1JCq^?;~wPvZY-!*?};L1a%K1HwZec170-p@IC$2o_*#rJHx-ec3H zhEH2P8<_>99c!#NAKNOxbOwJ~I>M5T+_K{qB?ilPpu-(JLL7*lEss%C8}D~hjf<|o zA2lv&92z^_fNj{Xg&RcyF@cR@5#K1?h^j2-6*h}>L_;u>@gqaY@gJ`+U=2bpwhVkNw{!eI>d+yTk z{)8Ox7X4MHTh7S^TnDyXo4PcAnvg z_r#$tD3w|FT>j%W?Ibb$j-%9v&_uf_DYrUl>=mc9{>O_E3fvM(!9@-WnW*zR_vyFJ ze|pfk(nd9ELX>1%n!&@U{RkM$D-a+*j@H2fk<3{Mdp_%5C3MEGg@|_9#|AhM-PJlh-pP*c; zr_f8XBsx>|6y5!@j`%6h=@Y{`ZxMd6b&!w2X`85WrlFCGy_cC-X30~8>lUefva9UJ zvVuK&yu;=)Yx&?X(%1W*;C_b65!sBD0zDaF=K(be6&;)DA8v=K<*Uc!mst}lYV}eR z20Ni{1f3E~ONw*4KoER6UMIn$zmF~T2$0#|{Gv{|Fx5U*q2Mu0MWm`ldu*-Fq!8Q3 zqQhfi%O%D0oB09LFPvk zK{=2~_tYR3Q~Z|-vMXlm!&|SL2=7BTwv5~DIWRvLN3ko!u-TDq z4*M5Knbl%V_2B9P*zdL%{F?6iaamNJZ2~`A8vkkN%pMSVEQ^+xzAR2ZY#du=4%__{ zrCKYg>BSX1*QRq0#n;JFBEM%4I9a=5QXn>?L}HxfR+UWAfev<_X>!D1r7~TrZ^`Ic z(hoyN1jU$C4BG}YCti<fy`k6=zi`(NuJo3} zqb)l(h~dt^iQL|NFp$swpj|){i)o!;Buyq zr00bxX`OL|M1QBAoZDY-RSJv8&5@-plSsggCsy!!U+CwRv;oKI4Gxyf58(KGv?uMZ z!3J_T`D%NCsGv-xa8aeQK~6f_JPM6@96+|Sy^m3LOzDpIQO`xXq3e-IHQw>xO7-h> zfd6XYb5Nq-L#DWfJCeCbQ=_40C+6+3#A`f)JRM^~_5APwdfvndSfvQ&-`nx8B<4WsjE~!%{dmw7 z5&!^++{1rKAGga8Oi{~s<6$a}G6uK%$^t_a?w~TMo50zw&;JvY(U<)H6_nvgO{Ma5 Y9~=Js%#>IHtS+6Vn%+(9^*fLL7Y~(t%>V!Z literal 0 HcmV?d00001 diff --git a/doc/img/example-hpe-rule-map.png b/doc/img/example-hpe-rule-map.png new file mode 100644 index 0000000000000000000000000000000000000000..0a26f076ac63ba513f27447f853ec93b6ee2d318 GIT binary patch literal 3406 zcma)9dpuP87T-GQp;9M>p$K^-C4(VC!WJ2fXUZcPkBAXcUQI7tY{YnFJj$fT`(%oY z$0+Y+MhP)8Baa~(bO_1oZuL3$o_jv`bI<)_@4bHOw|;A_-|zGNuJzk7mgdGg1jGaY z0N7!2+RzFB_+G(s>6Q)fTTweR8vgJFS{a`LO5691!-I{U`e=Osc$&Cv*_9t2Z}mUz z5C{N*4eJkI3yzEhfbGL3hWa+wohR9JpFJ#z`YR#f>FZ^9YJ8wTw zs1tcr8@DQ1p5a@zk)l#`vwBrz)86N{mb)V3ME&K(2wpWb>oLp|iR`I%lK|>OxL%xz zj(K*WIcA_h6FUCI0;o?}bzfOsAwnDK+mkTB7Ar!B9so!Pwft%WChpe`-UA%t+dBID zaLYELf)24M@rx(+D-=(j2W8>L9V zu93G74Zh>Ir@F&RYZ+K^7us;T=S{BOKwZQVoKZ>15z3(@NrH22=-haxJVn>s3yfYd z$9tvmJ#eVIvGV=eXhZZ)>LcpIa-$i=r0#}_YhOOT#AC4`x1mzO(Ch@sb`#Y?!D7T& z4Hwt_zP*Y^U4G-T#+=`B-VEJywYTTI zdx@TZEz{XdJ{M;l_Tf2nVDG<#J1xx| z@jEpqIqd{yzdL}*+5*fssjbBvqIw7M9YC!^Kr9slWaz-)xP1@C(~a zaaxMB_6uMZQ~7_d_~}zElgs6%rl!(5`~!rzcA3Q3gUmN?l$Df%s+}CNAcjd|R;KHO(J_N}fO@#!P_InbG8D=0ibY?kno&ZZ>Cow}5BBOu;N4 zXM1)6$KD7|=;O}0`H*D!rlZuc7Qa~ug-Wu7!Ww2fQXf219=Mc96O*QMlY%P;b=~J? zm>WHw&anC$IZ*y=kuAiMM@{H>j}BV*&kpO{%lW=p<#hcAGD*2gt(+0@ z`nBftEKWO)XI0MjU|D_WlD$7omX_gZXldv9H=PPjOK9EO>>8E0*>{Wd#P%mM9-{LU zWpy}ztF}+YtZqm+C7AweXx=+bjchwD(~+f=aGJ)Of1G)p@D;VFTEOgx1f zZfM`tk{htD)5Kj!!lM_Ps3k1C?dytA)!@)jo4pA1K195mBd8(+M)ksAGzNzckap;U zDiS}yzxBsF%!0oNZtm{frZ^D~{vGm_$pcL(Fh8PKnGa^Z`92&Rk((jv!;VNvn=PDO zN22xBGW!k1VCMX(gTM{rfQoWJC!m~03Rzr|xX1bK@((t1!4u51F-ELC>QB3IYR#buzkx7X0EZIVD#sI>AU zS3Unh@Ef8j^8P+P^kUM}5jj&6ZdB&gN73*qi|iVD#$L6oW$`5FF$6X1gC7k2WdEoE zf8Bi)lKPYT{M!1UP){0Ux=l;A`fZdety40S%if!VsY0y@_1P|Fc8a*Ha-eU`WY@5- zmp&vwa;3gFQuUH|Hv{Tp7RGspywXkX*e^qh@xg(%d!g{S-^7=DP}Ygd_bwagN)sP+ zl^h#Zop7RQmr1FAwuBXcLA@3)(Jeb?=Ms@`;YxE~tu&?xWi$<$kHDZhmxZCJ zI`Gv*aPq{S1Q%IehgsGmAxh|YH&^9uaf#xTT9&{n(`BI~8*+-Y7;E3$dS?&`yDf%RQR8b6$%on`lD0`kK*Bd*WyU;ZaNCz49|5| zS-LxZhla)>36MZndwd)D8uBV;zGfoeGTk)Y&EBWfiuoIwZ?ZC9i=jQ2aeOz7%bp6z z{EZzJA5SNnd!&8g_+h*3`*1Wqt}82sXKN!D84Vu+3!>^aZf*PqovYd0t_v4y4md1I z>^L!N7&Hn~G^s;V4lmxsgHKzAbmd+LO6pGnF*n!c?AcGj)#Ya3!p@(y9$tRd!6D@L zp-2b)hPILs`#!kFH$TL`EI)DMyq9KG%<^q6?A2@JCBa^F(REk6oJLZVT*4pN{!je= zH}to9nbB^nAkV0l>8A_uRFPsWqobol4IF%Na$jxX-Iq^S6k)hbZMK0^KWLJxhesXW zAtj=e?rR5}#j0&sEKh;M_aq5SE0WsR@>@Da>qI{3bFV|QRpG4| zR!tBo@NCmMr#F=7gTuWQ#>ygV&!%)%FQVEvA_dk1fD51K!(sTNb!vwxQP2iktXhI^ z=)vi{d}tK+#5+3ZeI4obMO4=gg@vB5GABnh`uC4RSxrg#CMU3a$kL=Mmp_mKhLptL zrpIYTKF&k-Llo_Om98ThGg&wCi&_;d;fykhjd$y%svRP>d9NxS!l-d)=VLEkU(pm+ zJ(r_e=HuM2_@`8iIw@91DOby4i@sHTHM&PZ&#l^+Q$Vk7+!*p!W z+T~7}X`PN5VN>*x^P1`kWlp*eZ0eH`C5+<%u^V8IzoW!j7;_4E9kw8Xzp&M7A9jz| z4y2f|L6{+UOL4uU^Pjr|f%PsQwm;j7h$lUy8IH_-?(yKi3Fq9~-=A`@jh?-n(Z402 zVA)jrfiNPzKws~`Eak*8fxo@{{QdRlUlymqGUr-Tkncit5Qt+_Wq;hkX9pXiRXy8- zw6f2nA8k{FtMiFPuGZCwkv4+7dDb@#pkBr`<%H=$+0+@z^5X1RHG3-cu)SaZi!0Nd f+5sAVP4dAnLFIiZ{cQLj2rw}+H!MAM;r2fPW^quw literal 0 HcmV?d00001 diff --git a/mkdocs.yml b/mkdocs.yml index e19db4ecdd..61864c2e64 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -120,6 +120,7 @@ pages: - Alerting/Entities.md - Alerting/Macros.md - Alerting/Rules.md + - Alerting/Rule-Mapping.md - Developing/os/Initial-Detection.md - Developing/os/Mem-CPU-Information.md - Developing/os/Test-Units.md