Add host correlation and assurance coverage
This commit is contained in:
parent
8194d13734
commit
b40ac4252c
36 changed files with 944 additions and 23 deletions
|
|
@ -237,6 +237,11 @@ def capture(alerts: list[Alert], state: SystemState, cfg: Config) -> Path:
|
|||
fh.write(f"{now.isoformat()} [{severity}] captured "
|
||||
f"{base.with_suffix('.log')} — signatures: {sigs}\n")
|
||||
|
||||
from . import assurance
|
||||
assurance.append_artifact(cfg, "snapshot-log", base.with_suffix(".log"))
|
||||
assurance.append_artifact(cfg, "snapshot-json", base.with_suffix(".json"))
|
||||
assurance.append_artifact(cfg, "events-log", cfg.events_log)
|
||||
|
||||
_notify(cfg, f"{severity}: {sigs}")
|
||||
|
||||
# Phone push (ntfy / Pushover / webhook), gated by notify_min_severity.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue