+
+ <!-- SCSI CONTROLLER -->
+ <rule id="2935" level="0" noalert="1">
+ <if_sid>5100</if_sid>
+ <id>mptscsih</id>
+ <description>Grouping for the mptscrih rules.</description>
+ </rule>
+
+ <rule id="2936" level="0" noalert="1">
+ <if_sid>5100</if_sid>
+ <id>mptbase</id>
+ <description>Grouping for the mptbase rules.</description>
+ </rule>
+
+ <rule id="2937" level="12">
+ <if_sid>2935</if_sid>
+ <status>FAILED</status>
+ <description>Possible Disk failure. SCSI controller error.</description>
+ </rule>
+
+ <rule id="2938" level="12">
+ <if_sid>2936</if_sid>
+ <action>failed</action>
+ <description>SCSI RAID ARRAY ERROR, drive failed.</description>
+ </rule>
+
+ <rule id="2939" level="12">
+ <if_sid>2936</if_sid>
+ <action>degraded</action>
+ <description>SCSI RAID is now in a degraded status.</description>
+ </rule>
+
+ <rule id="2940" level="0">
+ <program_name>^NetworkManager</program_name>
+ <description>NetworkManager grouping.</description>
+ </rule>
+
+ <rule id="2941" level="3">
+ <if_sid>2940</if_sid>
+ <match> No chain/target/match by that name.$</match>
+ <description>Incorrect chain/target/match.</description>
+ </rule>
+
+ <rule id="2942" level="0">
+ <if_sid>1002</if_sid>
+ <match>g_slice_set_config: assertion `sys_page_size == 0' failed</match>
+ <description>Uninteresting gnome error.</description>
+ </rule>
+
+ <rule id="2943" level="0">
+ <match>^nouveau </match>
+ <description>nouveau driver grouping</description>
+ </rule>
+
+ <rule id="2944" level="1">
+ <if_sid>2943</if_sid>
+ <match> DATA_ERROR BEGIN_END_ACTIVE$| DATA_ERROR$</match>
+ <description>Uninteresting nouveau error.</description>
+ </rule>
+
+ <rule id="2945" level="4">
+ <program_name>^rsyslogd</program_name>
+ <match>^imuxsock begins to drop messages </match>
+ <info>https://isc.sans.edu/diary/Are+you+losing+system+logging+information+%28and+don%27t+know+it%29%3F/15106</info>
+ <description>rsyslog may be dropping messages due to rate-limiting.</description>
+ </rule>
+