chore: initial import from KNEL/PFVCluster@041d311 [#769]

Split per O&M lane work order. Full history: KNEL/PFVCluster.
https://projects.knownelement.com/issues/769#note-4152
This commit is contained in:
2026-09-03 21:22:18 -05:00
commit 64198418ee
18 changed files with 1118 additions and 0 deletions
+14
View File
@@ -0,0 +1,14 @@
# siem
> **Docs live on Discourse — this repo is the executable source of truth.**
> **Topic:** https://community.turnsys.com/t/326
> **Redmine:** https://projects.knownelement.com/issues/335 · **Split from** KNEL/PFVCluster@041d311 per [#769](https://projects.knownelement.com/issues/769)
Centralized syslog + SIEM: Wazuh manager (tsys-siem 4.14.7), fleet agent deploy (mirror-first pinned debs), PVE rsyslog forwarding. [\#335]
## Layout
- `scripts/` — rule engine + hooks (see `bash scripts/check-rules.sh --fast`)
- (imported content at repo root, mirroring its PFVCluster path layout)
## Provenance
Code imported from KNEL/PFVCluster (041d311); full git history retained in PFVCluster. Enforcement layer copied per ADOPTING.md. IaC consumers: KNEL/KNELIAC references this repo.