170 lines
12 KiB
Python
170 lines
12 KiB
Python
ALERTS_CONFIG = {
|
|
"HDD Temp": {
|
|
"room": "disk",
|
|
"title": "\U0001F525 \u0422\u0435\u043c\u043f\u0435\u0440\u0430\u0442\u0443\u0440\u0430 HDD",
|
|
"summary": "\U0001F321 \u0422\u0435\u043c\u043f\u0435\u0440\u0430\u0442\u0443\u0440\u0430 \u0434\u0438\u0441\u043a\u043e\u0432 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0439 \u043f\u043e\u0440\u043e\u0433.",
|
|
"info": "\U0001F300 \u041f\u0440\u043e\u0432\u0435\u0440\u044c \u043e\u0445\u043b\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.",
|
|
"resolved": "\u2705 \u0422\u0435\u043c\u043f\u0435\u0440\u0430\u0442\u0443\u0440\u0430 HDD \u0432 \u043d\u043e\u0440\u043c\u0435.",
|
|
"formatter": "temperature",
|
|
"skip_zero_firing": False,
|
|
},
|
|
"HDD Bad Blocks": {
|
|
"room": "disk",
|
|
"title": "\U0001F4BD \u041f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u043a\u0442\u043e\u0440\u0430",
|
|
"summary": "\u26a0 \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u043a\u0442\u043e\u0440\u0430 \u043d\u0430 \u0434\u0438\u0441\u043a\u0435.",
|
|
"info": "\U0001F6E0 \u0422\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u043c\u0435\u043d\u0430 \u0434\u0438\u0441\u043a\u0430.",
|
|
"resolved": "\u2705 \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u043c\u0438 \u0440\u0435\u0448\u0435\u043d\u0430.",
|
|
"formatter": "bad_blocks",
|
|
"skip_zero_firing": True,
|
|
},
|
|
"Disk SMART Failed": {
|
|
"room": "disk",
|
|
"title": "\u274C \u041e\u0448\u0438\u0431\u043a\u0430 SMART",
|
|
"summary": "\u26A1 SMART \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0435 \u0434\u0438\u0441\u043a\u0430.",
|
|
"info": "\U0001F6E0 \u0421\u0440\u043e\u0447\u043d\u043e \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u0435 \u0434\u0438\u0441\u043a!",
|
|
"resolved": "\u2705 SMART \u043e\u0448\u0438\u0431\u043a\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430.",
|
|
"formatter": "smart",
|
|
"skip_zero_firing": False,
|
|
},
|
|
"Uncorrected Read Errors": {
|
|
"room": "disk",
|
|
"title": "\U0001F4c0 \u041e\u0448\u0438\u0431\u043a\u0438 \u0447\u0442\u0435\u043d\u0438\u044f",
|
|
"summary": "\u26a0 \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0447\u0442\u0435\u043d\u0438\u044f.",
|
|
"info": "\U0001F6E0 \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0434\u0438\u0441\u043a\u0430.",
|
|
"resolved": "\u2705 \u041e\u0448\u0438\u0431\u043a\u0438 \u0447\u0442\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b.",
|
|
"formatter": "read_errors",
|
|
"skip_zero_firing": True,
|
|
},
|
|
"ZFS Pool Offline": {
|
|
"room": "disk",
|
|
"title": "\U0001F6A8 ZFS Pool \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d",
|
|
"summary": "\u26A1 ZFS pool \u043f\u0435\u0440\u0435\u0448\u0435\u043b \u0432 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 offline.",
|
|
"info": "\U0001F5A5 \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 vdev.",
|
|
"resolved": "\u2705 ZFS pool \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d.",
|
|
"formatter": "zfs_pool",
|
|
"skip_zero_firing": False,
|
|
},
|
|
"Backup older than 24 hours": {
|
|
"room": "backup",
|
|
"title": "\U0001F525 \u0411\u044d\u043a\u0430\u043f \u0443\u0441\u0442\u0430\u0440\u0435\u043b",
|
|
"summary": "\u23F1 \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044d\u043a\u0430\u043f\u044b \u0441\u0442\u0430\u0440\u0448\u0435 24 \u0447\u0430\u0441\u043e\u0432.",
|
|
"info": "\U0001F6A8 \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0431\u044d\u043a\u0430\u043f\u0430.",
|
|
"resolved": "\u2705 \u0412\u0441\u0435 \u0431\u044d\u043a\u0430\u043f\u044b \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b.",
|
|
"formatter": "backup_outdated",
|
|
"skip_zero_firing": False,
|
|
},
|
|
"Backup Success": {
|
|
"room": "backup",
|
|
"title": "\u2705 \u0411\u044d\u043a\u0430\u043f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d",
|
|
"formatter": "backup_success",
|
|
},
|
|
"Backup Failed": {
|
|
"room": "backup",
|
|
"title": "\u274C \u0411\u044d\u043a\u0430\u043f \u043d\u0435 \u0443\u0434\u0430\u043b\u0441\u044f",
|
|
"formatter": "backup_failed",
|
|
},
|
|
"3xui-tls-errors": {
|
|
"room": "security",
|
|
"title": "\U0001F525 CrowdSec: TLS Errors",
|
|
"summary": "\U0001F525 \u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 TLS handshake",
|
|
"info": "\U0001F6E0 \u041f\u0440\u043e\u0432\u0435\u0440\u044c \u043b\u043e\u0433\u0438 3x-ui \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0430\u0442\u0430\u043a",
|
|
"formatter": "crowdsec_ban",
|
|
"skip_zero_firing": False,
|
|
},
|
|
"3xui-successful-login": {
|
|
"room": "security",
|
|
"title": "\u26A0\uFE0F CrowdSec: \u0423\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u0432\u0445\u043e\u0434 3x-ui",
|
|
"summary": "\U0001F464 \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 3x-ui",
|
|
"formatter": "crowdsec_alert",
|
|
"skip_zero_firing": False,
|
|
},
|
|
"crowdsecurity/ssh-bf": {
|
|
"room": "security",
|
|
"title": "\U0001F525 CrowdSec: SSH Brute-Force",
|
|
"summary": "\U0001F511 \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 SSH brute-force \u0430\u0442\u0430\u043a\u0430",
|
|
"info": "\U0001F6E0 IP \u0437\u0430\u0431\u0430\u043d\u0435\u043d \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438",
|
|
"formatter": "crowdsec_ban",
|
|
"skip_zero_firing": False,
|
|
},
|
|
"crowdsecurity/ssh-slow-bf": {
|
|
"room": "security",
|
|
"title": "\U0001F525 CrowdSec: SSH Slow Brute-Force",
|
|
"summary": "\U0001F511 \u041c\u0435\u0434\u043b\u0435\u043d\u043d\u0430\u044f SSH brute-force \u0430\u0442\u0430\u043a\u0430",
|
|
"info": "\U0001F6E0 IP \u0437\u0430\u0431\u0430\u043d\u0435\u043d \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438",
|
|
"formatter": "crowdsec_ban",
|
|
"skip_zero_firing": False,
|
|
},
|
|
"crowdsecurity/ssh-bf_user-enum": {
|
|
"room": "security",
|
|
"title": "\U0001F525 CrowdSec: SSH User Enumeration",
|
|
"summary": "\U0001F464 \u041f\u0435\u0440\u0435\u0431\u043e\u0440 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 SSH",
|
|
"info": "\U0001F6E0 IP \u0437\u0430\u0431\u0430\u043d\u0435\u043d \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438",
|
|
"formatter": "crowdsec_ban",
|
|
"skip_zero_firing": False,
|
|
},
|
|
"crowdsecurity/http-bad-user-agent": {
|
|
"room": "security",
|
|
"title": "\U0001F525 CrowdSec: Bad User-Agent",
|
|
"summary": "\U0001F577\uFE0F \u041f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 User-Agent",
|
|
"info": "\U0001F6E0 IP \u0437\u0430\u0431\u0430\u043d\u0435\u043d \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438",
|
|
"formatter": "crowdsec_ban",
|
|
"skip_zero_firing": False,
|
|
},
|
|
"crowdsec/mass-attack": {
|
|
"room": "security",
|
|
"title": "\U0001F6A8 CrowdSec: \u041c\u0430\u0441\u0441\u043e\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430",
|
|
"summary": "\U0001F525 \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 50 \u0431\u0430\u043d\u043e\u0432 \u0437\u0430 5 \u043c\u0438\u043d\u0443\u0442",
|
|
"info": "\U0001F6E0 \u041f\u0440\u043e\u0432\u0435\u0440\u044c \u043b\u043e\u0433\u0438 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438",
|
|
"formatter": "crowdsec_mass_attack",
|
|
"skip_zero_firing": False,
|
|
},
|
|
"ssh-successful-login": {
|
|
"room": "security",
|
|
"title": "\u2705 CrowdSec: SSH \u0423\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u0432\u0445\u043e\u0434",
|
|
"summary": "\U0001F511 \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e SSH",
|
|
"formatter": "crowdsec_alert",
|
|
"skip_zero_firing": False,
|
|
},
|
|
"service-disabled": {
|
|
"room": "security",
|
|
"title": "\u26D4 CrowdSec: \u041e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0437\u0430\u0449\u0438\u0442\u044b",
|
|
"summary": "\U0001F6A8 \u041e\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
|
|
"formatter": "crowdsec_service_disabled",
|
|
"skip_zero_firing": False,
|
|
},
|
|
"sudo-escalation": {
|
|
"room": "security",
|
|
"title": "\u26A0\uFE0F CrowdSec: \u041f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439",
|
|
"summary": "\U0001F511 \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root",
|
|
"formatter": "crowdsec_sudo",
|
|
"skip_zero_firing": False,
|
|
},
|
|
"critical-file-change": {
|
|
"room": "security",
|
|
"title": "\U0001F5C2\uFE0F CrowdSec: \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430",
|
|
"summary": "\U0001F4CB \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0431\u044b\u043b \u0438\u0437\u043c\u0435\u043d\u0451\u043d",
|
|
"formatter": "crowdsec_file_change",
|
|
"skip_zero_firing": False,
|
|
},
|
|
"package-installed": {
|
|
"room": "security",
|
|
"title": "\U0001F4E5 CrowdSec: \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043f\u0430\u043a\u0435\u0442\u0430",
|
|
"summary": "\U0001F4E6 \u041d\u043e\u0432\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0447\u0435\u0440\u0435\u0437 apt/dpkg",
|
|
"formatter": "crowdsec_package",
|
|
"skip_zero_firing": False,
|
|
},
|
|
"new-systemd-service": {
|
|
"room": "security",
|
|
"title": "\U0001F6E0 CrowdSec: \u041d\u043e\u0432\u044b\u0439 systemd \u0441\u0435\u0440\u0432\u0438\u0441",
|
|
"summary": "\U0001F6E0 \u0421\u043e\u0437\u0434\u0430\u043d \u043d\u043e\u0432\u044b\u0439 systemd \u0441\u0435\u0440\u0432\u0438\u0441",
|
|
"formatter": "crowdsec_service",
|
|
"skip_zero_firing": False,
|
|
},
|
|
"suspicious-outbound": {
|
|
"room": "security",
|
|
"title": "\U0001F310 CrowdSec: \u041f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435",
|
|
"summary": "\U0001F310 \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0435\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435",
|
|
"formatter": "crowdsec_connection",
|
|
"skip_zero_firing": False,
|
|
},
|
|
} |