**Phase 1: Completed pre-decoding.
       full event: 'Dec 18 18:06:28 hostname cimserver[18575]: PGS17200: Authentication failed for user jones_b.'
       hostname: 'hostname'
       program_name: 'cimserver'
       log: 'PGS17200: Authentication failed for user jones_b.'

**Phase 2: Completed decoding.
       decoder: 'cimserver'
       dstuser: 'jones_b.'

**Phase 3: Completed filtering (rules).
       Rule id: '9610'
       Level: '5'
       Description: 'Compaq Insight Manager authentication failure.'
**Alert to be generated.