fix: normalize SNMP trap bodies #3131

Merged

mfreeman451 merged 1 commit from 3130-bug-snmp-trap-body-normalization into staging

2026-04-06 06:31:25 +00:00

mfreeman451 commented

2026-04-06 06:31:17 +00:00

Owner

Summary

fix the built-in SNMP Zen rule so missing or empty bodies are derived from varbind text instead of persisting logs.snmp.processed
reconcile seeded snmp_severity rules when they still use the built-in template contract, while preserving user-authored overrides
add defensive SNMP varbind body fallback coverage in the Elixir and Go log parsers plus OpenSpec/spec updates

Testing

go test ./go/pkg/consumers/db-event-writer
cargo test --manifest-path rust/consumers/zen/Cargo.toml
mix test test/serviceradar/observability/zen_rule_templates_test.exs test/serviceradar/observability/zen_rule_seeder_test.exs test/serviceradar/event_writer/processors/logs_test.exs (still compiling serviceradar_core; no pass/fail result captured yet)
openspec validate fix-snmp-trap-body-normalization --strict

Issue

Closes #3130

## Summary - fix the built-in SNMP Zen rule so missing or empty bodies are derived from varbind text instead of persisting `logs.snmp.processed` - reconcile seeded `snmp_severity` rules when they still use the built-in template contract, while preserving user-authored overrides - add defensive SNMP varbind body fallback coverage in the Elixir and Go log parsers plus OpenSpec/spec updates ## Testing - `go test ./go/pkg/consumers/db-event-writer` - `cargo test --manifest-path rust/consumers/zen/Cargo.toml` - `mix test test/serviceradar/observability/zen_rule_templates_test.exs test/serviceradar/observability/zen_rule_seeder_test.exs test/serviceradar/event_writer/processors/logs_test.exs` (still compiling `serviceradar_core`; no pass/fail result captured yet) - `openspec validate fix-snmp-trap-body-normalization --strict` ## Issue - Closes #3130

Rows
Columns