feat: Added support for more dell powerstore events (#2818)

Author: sbylica-splunk

package/enterprise/etc/conf.d/conflib/syslog/app-syslog-dell_powerstore.conf

@@ -12,7 +12,7 @@ block parser app-syslog-dell_powerstore() {
 };
 application app-syslog-dell_powerstore[sc4s-network-source] {
     filter {
-        match('\[PowerStore_audit_event@1139' value("MESSAGE"));
-        };
+        match('\[PowerStore_[A-Za-z_]+@1139' value("MESSAGE"));
+    };
 	parser { app-syslog-dell_powerstore(); };
 };

package/etc/conf.d/conflib/syslog/app-syslog-dell_powerstore.conf

@@ -12,7 +12,7 @@ block parser app-syslog-dell_powerstore() {
 };
 application app-syslog-dell_powerstore[sc4s-network-source] {
     filter {
-        match('\[PowerStore_audit_event@1139' value("MESSAGE"));
-        };
+        match('\[PowerStore_[A-Za-z_]+@1139' value("MESSAGE"));
+    };
 	parser { app-syslog-dell_powerstore(); };
 };

package/lite/etc/addons/dell/app-syslog-dell_powerstore.conf

@@ -12,7 +12,7 @@ block parser app-syslog-dell_powerstore() {
 };
 application app-syslog-dell_powerstore[sc4s-network-source] {
     filter {
-        match('\[PowerStore_audit_event@1139' value("MESSAGE"));
-        };
+        match('\[PowerStore_[A-Za-z_]+@1139' value("MESSAGE"));
+    };
 	parser { app-syslog-dell_powerstore(); };
 };

tests/test_dell_powerstore.py

@@ -21,6 +21,7 @@
 # <110>Jan 31 19:48:25 APM00243620939-B [358]: 2025-01-31T19:48:16 APM00243620939-B PSb8ad27c26647 358@HM3CTZ3 Authentication [PowerStore_audit_event@1139 id="2349" user="EncryptHTTP.PSb8ad27c26647" resource_type="login_session" action="None" client_ip="None" appliance="APM00243620939" status="success"] Successfully authenticated cert_account : Dell EMC PowerStore CA P9XEU8F5/EncryptHTTP.PSb8ad27c26647.
 # <110>Jan 31 19:49:05 APM00243620939-B [358]: 2025-01-31T19:48:49 APM00243620939-B PSb8ad27c26647 358@HM3CTZ3 Config [PowerStore_audit_event@1139 id="2351" user="admin" resource_type="system_health_check" action="create" client_ip="10.114.173.252" appliance="APM00243620939" status="failed"] Failed to perform system health check on pki-tech-ps-p01.
 # <110>Jan 31 19:58:46 APM00243620939-B [358]: 2025-01-31T19:58:22 APM00243620939-B PSb8ad27c26647 358@HM3CTZ3 Logout [PowerStore_audit_event@1139 id="2352" user="admin" resource_type="login_session" action="delete" client_ip="10.114.173.252" appliance="APM00243620939" status="success"] User "admin" was successfully logged out.
+# <110>Jan 31 19:58:46 APM00243620939-B [358]: 2025-01-31T19:58:22 APM00243620939-B PSb8ad27c26647 358@HM3CTZ3 AlertEvent [PowerStore_remote_logging_alert@1139 sequence_number="52497" event_name="REMOTE_SUPPORT_CONNECTIVITY_STATUS_NORMAL" resource_type="remote_support" resource_name="SupportAssist" alert_id="ef7b021c-23a0-4821-8245-289cbdc7addd" alert_state="Cleared" appliance_name="rzpowerstore01-appliance-1" event_id="b320f9b7-c44e-bd39-ab56-8d278c69f6bb" event_code="0x00d00203" system_impact="None" repair_flow=""] Cluster connectivity is good. Appliance status: A1 Good.
 
 test_cases = [
     "{{ mark }}{{ bsd }} {{ host }} [358]: {{ iso }} {{ host }} PSb8ad27c26647 358@HM3CTZ3 Authentication [PowerStore_audit_event@1139 id=\"2341\" user=\"admin\" resource_type=\"login_session\" action=\"None\" client_ip=\"10.114.173.252\" appliance=\"APM00243620939\" status=\"success\"] User \"admin\" logged in successfully.",
@@ -29,7 +30,7 @@
     "{{ mark }}{{ bsd }} {{ host }} [358]: {{ iso }} {{ host }} PSb8ad27c26647 358@HM3CTZ3 Authentication [PowerStore_audit_event@1139 id=\"2349\" user=\"EncryptHTTP.PSb8ad27c26647\" resource_type=\"login_session\" action=\"None\" client_ip=\"None\" appliance=\"APM00243620939\" status=\"success\"] Successfully authenticated cert_account : Dell EMC PowerStore CA P9XEU8F5/EncryptHTTP.PSb8ad27c26647.",
     "{{ mark }}{{ bsd }} {{ host }} [358]: {{ iso }} {{ host }} PSb8ad27c26647 358@HM3CTZ3 Config [PowerStore_audit_event@1139 id=\"2351\" user=\"admin\" resource_type=\"system_health_check\" action=\"create\" client_ip=\"10.114.173.252\" appliance=\"APM00243620939\" status=\"failed\"] Failed to perform system health check on pki-tech-ps-p01.",
     "{{ mark }}{{ bsd }} {{ host }} [358]: {{ iso }} {{ host }} PSb8ad27c26647 358@HM3CTZ3 Logout [PowerStore_audit_event@1139 id=\"2352\" user=\"admin\" resource_type=\"login_session\" action=\"delete\" client_ip=\"10.114.173.252\" appliance=\"APM00243620939\" status=\"success\"] User \"admin\" was successfully logged out."
-
+    "{{ mark }}{{ bsd }} {{ host }} [358]: {{ iso }} {{ host }} PSb8ad27c26647 358@HM3CTZ3 AlertEvent [PowerStore_remote_logging_alert@1139 sequence_number=\"52497\" event_name=\"REMOTE_SUPPORT_CONNECTIVITY_STATUS_NORMAL\" resource_type=\"remote_support\" resource_name=\"SupportAssist\" alert_id=\"ef7b021c-23a0-4821-8245-289cbdc7addd\" alert_state=\"Cleared\" appliance_name=\"rzpowerstore01-appliance-1\" event_id=\"b320f9b7-c44e-bd39-ab56-8d278c69f6bb\" event_code=\"0x00d00203\" system_impact=\"None\" repair_flow=\"\"] Cluster connectivity is good. Appliance status: A1 Good."
 ]