{
  "alerts": {
    "alert_counts": {
      "CROSS_ZONE_VIOLATION": 580,
      "DNP3_RESTART_COMMAND": 28,
      "DNP3_UNAUTHORIZED_CONTROL": 108,
      "DNP3_UNSOLICITED_DISABLED": 28,
      "HMI_LOGIN_FAILURE": 9,
      "OPCUA_BROWSE_REQUEST": 28,
      "OPCUA_METHOD_CALL": 28,
      "OPCUA_WRITE_REQUEST": 28,
      "OT_BRUTE_FORCE_SCAN": 56,
      "PROCESS_SAFETY_VIOLATION": 55,
      "S7COMM_CHANGE_OPERATING_MODE": 56,
      "S7COMM_PROGRAM_DOWNLOAD": 84,
      "S7COMM_PROGRAM_UPLOAD": 84,
      "UNAUTHORIZED_MODBUS_WRITE": 202
    },
    "distinct_sources": [
      "172.22.0.10",
      "172.23.0.20",
      "172.24.0.10",
      "172.24.0.30",
      "172.25.0.1"
    ]
  },
  "captured_at": "2026-09-15T16:34:47Z",
  "grafana_datasources": [
    "InfluxDB-Historian",
    "Loki"
  ],
  "historian_last_values": {
    "plc_distribution": {
      "pressure": 1
    },
    "plc_intake": {
      "level": 49
    },
    "plc_treatment": {
      "chlorine": 20
    }
  },
  "ruler_rules": {
    "CrossZoneViolation": {
      "health": "ok",
      "state": "inactive"
    },
    "DNP3_Cold_Or_Warm_Restart_Command": {
      "health": "ok",
      "state": "inactive"
    },
    "DNP3_Control_Operation_From_Unauthorized_Master": {
      "health": "ok",
      "state": "inactive"
    },
    "DNP3_Unsolicited_Responses_Disabled": {
      "health": "ok",
      "state": "inactive"
    },
    "Industrial_Protocol_Traffic_From_Enterprise_To_Control_Zone": {
      "health": "ok",
      "state": "inactive"
    },
    "ModbusExceptionFlood": {
      "health": "ok",
      "state": "inactive"
    },
    "Modbus_Device_Identification_Scan": {
      "health": "ok",
      "state": "inactive"
    },
    "Modbus_Write_From_Unauthorized_Control_Writer": {
      "health": "ok",
      "state": "inactive"
    },
    "NoOTAlertsIngested": {
      "health": "ok",
      "state": "inactive"
    },
    "OPC_UA_Address_Space_Browse": {
      "health": "ok",
      "state": "inactive"
    },
    "OPC_UA_Method_Call_Request": {
      "health": "ok",
      "state": "inactive"
    },
    "OPC_UA_Write_Request": {
      "health": "ok",
      "state": "inactive"
    },
    "ProcessSafetyViolation": {
      "health": "ok",
      "state": "inactive"
    },
    "Process_Safety_Violation_From_Physics_Aware_Monitor": {
      "health": "ok",
      "state": "inactive"
    },
    "S7comm_PLC_Control_Or_Stop": {
      "health": "ok",
      "state": "inactive"
    },
    "S7comm_Program_Download": {
      "health": "ok",
      "state": "inactive"
    },
    "S7comm_Program_Upload": {
      "health": "ok",
      "state": "inactive"
    },
    "UnauthorizedModbusWrite": {
      "health": "ok",
      "state": "inactive"
    }
  },
  "window_seconds": 3600
}
