[firewall-accept:src=203.0.113.45,dst=192.168.1.100:443,proto=TCP]
[firewall-drop:src=198.51.100.23,dst=192.168.1.100:22,reason=blocked_port]
[firewall-accept:src=203.0.113.67,dst=192.168.1.200:80,proto=TCP]
[firewall-drop:src=192.0.2.15,dst=192.168.1.100:3389,reason=suspicious_source]
[firewall-accept:src=203.0.113.45,dst=192.168.1.100:443,proto=TCP]
[ids-sqli:src=198.51.100.23,dst=192.168.1.100:80]
[ids-portscan:src=192.0.2.15,target=192.168.1.0/24]
[ids-bruteforce:src=198.51.100.23,dst=192.168.1.100:22]
[auth-success:user=alice@example.com,ip=203.0.113.45]
[auth-failure:user=admin,ip=198.51.100.23,reason=invalid_password]
[auth-success:user=bob@example.com,ip=203.0.113.67]
[auth-failure:user=admin,ip=198.51.100.23,reason=invalid_password]
[auth-failure:user=admin,ip=198.51.100.23,reason=invalid_password]
[auth-failure:user=root,ip=192.0.2.15,reason=account_disabled]
