feat(go): persist Python-compatible incidents
This commit is contained in:
parent
f85c2e831a
commit
538d1d954a
13 changed files with 555 additions and 46 deletions
|
|
@ -72,9 +72,11 @@ hardened systemd unit writes JSONL to journald, retains a bounded copy of the
|
|||
event stream plus baseline state and an atomic heartbeat under
|
||||
`/var/lib/enodia-sentinel-go`, and fails open to polling if a probe cannot load.
|
||||
It also writes bounded `enodia.alert.snapshot.v1` JSON/text pairs with truthful
|
||||
status counts. It does not replace, install over, or write state for the Python
|
||||
daemon; Python remains authoritative for richer forensic enrichment, incidents,
|
||||
assurance, notifications, and the remaining subsystem parity.
|
||||
status counts and a private Python-compatible `enodia.incident.v1` index using
|
||||
process-lineage/time-window grouping. It does not replace, install over, or
|
||||
write state for the Python daemon; Python remains authoritative for richer
|
||||
forensic enrichment, assurance, notifications, management consumers, and the
|
||||
remaining subsystem parity.
|
||||
|
||||
## Why these detectors
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue