2025-08-15 14:44:41,331 - INFO - --- Running Monitoring Cycle --- 2025-08-15 14:44:41,332 - INFO - System Logs: {'log': "Failed login attempt for user 'root' from 10.0.0.1"} 2025-08-15 14:44:43,383 - WARNING - Could not parse ping output with jc. Returning raw output. 2025-08-15 14:44:43,384 - INFO - Network Metrics: {'ping_output': '\nPinging 8.8.8.8 with 32 bytes of data:\nReply from 8.8.8.8: bytes=32 time=18ms TTL=111\nReply from 8.8.8.8: bytes=32 time=23ms TTL=111\nReply from 8.8.8.8: bytes=32 time=18ms TTL=111\n\nPing statistics for 8.8.8.8:\n Packets: Sent = 3, Received = 3, Lost = 0 (0% loss),\nApproximate round trip times in milli-seconds:\n Minimum = 18ms, Maximum = 23ms, Average = 19ms\n'} 2025-08-15 14:44:43,384 - INFO - Combined Data: { "system_logs": { "log": "Failed login attempt for user 'root' from 10.0.0.1" }, "network_metrics": { "ping_output": "\nPinging 8.8.8.8 with 32 bytes of data:\nReply from 8.8.8.8: bytes=32 time=18ms TTL=111\nReply from 8.8.8.8: bytes=32 time=23ms TTL=111\nReply from 8.8.8.8: bytes=32 time=18ms TTL=111\n\nPing statistics for 8.8.8.8:\n Packets: Sent = 3, Received = 3, Lost = 0 (0% loss),\nApproximate round trip times in milli-seconds:\n Minimum = 18ms, Maximum = 23ms, Average = 19ms\n" } } 2025-08-15 14:44:56,562 - INFO - HTTP Request: POST http://192.168.2.114:11434/api/generate "HTTP/1.1 200 OK" 2025-08-15 14:44:56,562 - INFO - LLM Response: After analyzing the system data in JSON format, I've identified a potential issue. The log entry indicates a failed login attempt for the 'root' user from IP address 10.0.0.1. While failed login attempts are not uncommon, this one stands out because it is not accompanied by any subsequent successful login attempts or other related log entries. This suggests that the failed login may have been an isolated incident and could be a sign of malicious activity. I would categorize this anomaly as medium severity due to the potential security implications. The possible cause could be unauthorized access attempts, which might warrant further investigation into the system's authentication mechanisms and access controls. Report: "A failed login attempt for the 'root' user from IP address 10.0.0.1 indicates a potential security risk with a medium severity level. Further analysis is required to determine the root cause, but it may be indicative of unauthorized access attempts." 2025-08-15 14:44:56,563 - INFO - Anomaly detected, sending alerts... 2025-08-15 14:44:56,885 - INFO - Discord alert sent. 2025-08-15 14:44:56,891 - INFO - Google Home alert sent. 2025-08-15 14:44:56,891 - INFO - --- Cycle Complete, sleeping for 5 minutes --- 2025-08-15 15:20:07,557 - INFO - --- Running Monitoring Cycle --- 2025-08-15 15:20:07,558 - INFO - System Logs: {'log': "Failed login attempt for user 'root' from 10.0.0.1"} 2025-08-15 15:20:09,582 - WARNING - Could not parse ping output with jc. Returning raw output. 2025-08-15 15:20:09,582 - INFO - Network Metrics: {'ping_output': 'PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=17.3 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=17.0 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=18.5 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2002ms\nrtt min/avg/max/mdev = 17.002/17.619/18.507/0.643 ms\n'} 2025-08-15 15:20:09,582 - INFO - Combined Data: { "system_logs": { "log": "Failed login attempt for user 'root' from 10.0.0.1" }, "network_metrics": { "ping_output": "PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=17.3 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=17.0 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=18.5 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2002ms\nrtt min/avg/max/mdev = 17.002/17.619/18.507/0.643 ms\n" } } 2025-08-15 15:20:23,526 - INFO - HTTP Request: POST http://192.168.2.114:11434/api/generate "HTTP/1.1 200 OK" 2025-08-15 15:20:23,527 - INFO - LLM Response: After analyzing the system and network data, I've identified an anomaly. The anomaly appears in the system logs where there was a failed login attempt for user 'root' from IP address 10.0.0.1. This could be indicative of a potential security breach or unauthorized access attempt. The severity of this anomaly is high due to the fact that it involves a privileged account and an external IP address, which may suggest malicious activity. I've reviewed the network metrics data, including the ping output to 8.8.8.8, and found no apparent issues with packet loss, latency, or other indicators of network problems. However, I must consider the possibility that the failed login attempt could be related to a network issue, such as a spoofed IP address or a compromised system on the same network. To mitigate this anomaly, it is recommended to investigate the source of the failed login attempt and review the system's access logs for any other suspicious activity. Additionally, administrators should ensure that all systems are running up-to-date software and firmware and implement additional security measures to prevent similar incidents in the future. 2025-08-15 15:20:23,527 - INFO - Anomaly detected, sending alerts... 2025-08-15 15:20:24,023 - INFO - Discord alert sent. 2025-08-15 15:20:24,032 - INFO - Google Home alert sent. 2025-08-15 15:20:24,032 - INFO - --- Cycle Complete, sleeping for 5 minutes --- 2025-08-15 15:23:31,198 - INFO - --- Running Monitoring Cycle --- 2025-08-15 15:23:31,383 - WARNING - Error parsing individual syslog line: 2025-08-15T15:22:38.789739-05:00 homelab systembridge[1156]: 2025-08-15T20:22:38.789292972Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/ - Unable to parse message: '2025-08-15T15:22:38.789739-05:00 homelab systembridge[1156]: 2025-08-15T20:22:38.789292972Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/\n' 2025-08-15 15:23:31,383 - WARNING - Error parsing individual syslog line: 2025-08-15T15:22:38.800105-05:00 homelab systembridge[1156]: 2025-08-15T20:22:38.800013908Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/ - Unable to parse message: '2025-08-15T15:22:38.800105-05:00 homelab systembridge[1156]: 2025-08-15T20:22:38.800013908Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/\n' 2025-08-15 15:23:31,383 - WARNING - Error parsing individual syslog line: 2025-08-15T15:22:38.802615-05:00 homelab systembridge[1156]: 2025-08-15T20:22:38.802541824Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running - Unable to parse message: '2025-08-15T15:22:38.802615-05:00 homelab systembridge[1156]: 2025-08-15T20:22:38.802541824Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running\n' 2025-08-15 15:23:31,383 - WARNING - Error parsing individual syslog line: 2025-08-15T15:22:38.802700-05:00 homelab systembridge[1156]: 2025-08-15T20:22:38.802587117Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again - Unable to parse message: '2025-08-15T15:22:38.802700-05:00 homelab systembridge[1156]: 2025-08-15T20:22:38.802587117Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again\n' 2025-08-15 15:23:31,383 - WARNING - Error parsing individual syslog line: 2025-08-15T15:22:39.517834-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:22:39.517Z"} - Unable to parse message: '2025-08-15T15:22:39.517834-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:22:39.517Z"}\n' 2025-08-15 15:23:31,383 - WARNING - Error parsing individual syslog line: 2025-08-15T15:22:49.522685-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:22:49.522Z"} - Unable to parse message: '2025-08-15T15:22:49.522685-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:22:49.522Z"}\n' 2025-08-15 15:23:31,383 - WARNING - Error parsing individual syslog line: 2025-08-15T15:22:59.527535-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:22:59.527Z"} - Unable to parse message: '2025-08-15T15:22:59.527535-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:22:59.527Z"}\n' 2025-08-15 15:23:31,384 - WARNING - Error parsing individual syslog line: 2025-08-15T15:23:09.531923-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:23:09.531Z"} - Unable to parse message: '2025-08-15T15:23:09.531923-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:23:09.531Z"}\n' 2025-08-15 15:23:31,384 - WARNING - Error parsing individual syslog line: 2025-08-15T15:23:19.536931-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:23:19.536Z"} - Unable to parse message: '2025-08-15T15:23:19.536931-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:23:19.536Z"}\n' 2025-08-15 15:23:31,384 - WARNING - Error parsing individual syslog line: 2025-08-15T15:23:29.538196-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:23:29.537Z"} - Unable to parse message: '2025-08-15T15:23:29.538196-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:23:29.537Z"}\n' 2025-08-15 15:23:31,384 - INFO - System Logs: [] 2025-08-15 15:23:33,409 - WARNING - Could not parse ping output with jc. Returning raw output. 2025-08-15 15:23:33,409 - INFO - Network Metrics: {'ping_output': 'PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=19.0 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=19.7 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=19.3 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2002ms\nrtt min/avg/max/mdev = 19.002/19.322/19.653/0.265 ms\n'} 2025-08-15 15:23:33,410 - INFO - Combined Data: { "system_logs": [], "network_metrics": { "ping_output": "PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=19.0 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=19.7 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=19.3 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2002ms\nrtt min/avg/max/mdev = 19.002/19.322/19.653/0.265 ms\n" } } 2025-08-15 15:23:42,028 - INFO - HTTP Request: POST http://192.168.2.114:11434/api/generate "HTTP/1.1 200 OK" 2025-08-15 15:23:42,029 - INFO - LLM Response: After analyzing the system and network data provided in JSON format, I have identified an anomaly. The anomaly is related to the ping output, where the time-to-live (TTL) value for each packet sent to 8.8.8.8 was consistently reported as 111, which is unusually high compared to typical TTL values of around 64 or lower. This could indicate a misconfigured routing table or an IP forwarding anomaly in the network. The potential cause of this anomaly is a possible issue with the system's configuration or a specific router setting along the path to 8.8.8.8 that is causing the excessive TTL value. The severity of this anomaly is considered medium, as it may indicate an underlying issue within the network but does not necessarily imply a high-risk security threat. Here is the report: "There is an unusual ping output anomaly where the time-to-live (TTL) value for packets sent to 8.8.8.8 consistently reports as 111, which could be indicative of a misconfigured routing table or IP forwarding issue within the network. This has a medium severity rating, suggesting that it requires further investigation to determine its cause and impact on system performance." 2025-08-15 15:23:42,029 - INFO - Anomaly detected, sending alerts... 2025-08-15 15:23:42,227 - INFO - Discord alert sent. 2025-08-15 15:23:42,239 - INFO - Google Home alert sent. 2025-08-15 15:23:42,239 - INFO - --- Cycle Complete, sleeping for 5 minutes --- 2025-08-15 15:25:08,064 - INFO - --- Running Monitoring Cycle --- 2025-08-15 15:25:08,200 - WARNING - Error parsing individual syslog line: 2025-08-15T15:24:38.789911-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.789562570Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server.. - Unable to parse message: '2025-08-15T15:24:38.789911-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.789562570Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..\n' 2025-08-15 15:25:08,201 - WARNING - Error parsing individual syslog line: 2025-08-15T15:24:38.790072-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.789616879Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001 - Unable to parse message: '2025-08-15T15:24:38.790072-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.789616879Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001\n' 2025-08-15 15:25:08,201 - WARNING - Error parsing individual syslog line: 2025-08-15T15:24:38.790105-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.789662407Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/ - Unable to parse message: '2025-08-15T15:24:38.790105-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.789662407Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/\n' 2025-08-15 15:25:08,201 - WARNING - Error parsing individual syslog line: 2025-08-15T15:24:38.800515-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.800415024Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/ - Unable to parse message: '2025-08-15T15:24:38.800515-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.800415024Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/\n' 2025-08-15 15:25:08,201 - WARNING - Error parsing individual syslog line: 2025-08-15T15:24:38.802962-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.802847954Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running - Unable to parse message: '2025-08-15T15:24:38.802962-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.802847954Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running\n' 2025-08-15 15:25:08,201 - WARNING - Error parsing individual syslog line: 2025-08-15T15:24:38.803038-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.802896671Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again - Unable to parse message: '2025-08-15T15:24:38.803038-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.802896671Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again\n' 2025-08-15 15:25:08,201 - WARNING - Error parsing individual syslog line: 2025-08-15T15:24:39.566389-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:24:39.565Z"} - Unable to parse message: '2025-08-15T15:24:39.566389-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:24:39.565Z"}\n' 2025-08-15 15:25:08,201 - WARNING - Error parsing individual syslog line: 2025-08-15T15:24:49.571317-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:24:49.570Z"} - Unable to parse message: '2025-08-15T15:24:49.571317-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:24:49.570Z"}\n' 2025-08-15 15:25:08,201 - WARNING - Error parsing individual syslog line: 2025-08-15T15:24:59.575913-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:24:59.575Z"} - Unable to parse message: '2025-08-15T15:24:59.575913-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:24:59.575Z"}\n' 2025-08-15 15:25:08,201 - WARNING - Error parsing individual syslog line: 2025-08-15T15:25:01.218427-05:00 homelab CRON[3104688]: (root) CMD (command -v debian-sa1 > /dev/null && debian-sa1 1 1) - Unable to parse message: '2025-08-15T15:25:01.218427-05:00 homelab CRON[3104688]: (root) CMD (command -v debian-sa1 > /dev/null && debian-sa1 1 1)\n' 2025-08-15 15:25:08,202 - INFO - System Logs: [{'raw_log': '2025-08-15T15:24:38.789911-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.789562570Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..', 'parsing_error': "Unable to parse message: '2025-08-15T15:24:38.789911-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.789562570Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..\\n'"}, {'raw_log': '2025-08-15T15:24:38.790072-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.789616879Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001', 'parsing_error': "Unable to parse message: '2025-08-15T15:24:38.790072-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.789616879Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001\\n'"}, {'raw_log': '2025-08-15T15:24:38.790105-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.789662407Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/', 'parsing_error': "Unable to parse message: '2025-08-15T15:24:38.790105-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.789662407Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/\\n'"}, {'raw_log': '2025-08-15T15:24:38.800515-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.800415024Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/', 'parsing_error': "Unable to parse message: '2025-08-15T15:24:38.800515-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.800415024Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/\\n'"}, {'raw_log': '2025-08-15T15:24:38.802962-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.802847954Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running', 'parsing_error': "Unable to parse message: '2025-08-15T15:24:38.802962-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.802847954Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running\\n'"}, {'raw_log': '2025-08-15T15:24:38.803038-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.802896671Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again', 'parsing_error': "Unable to parse message: '2025-08-15T15:24:38.803038-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.802896671Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again\\n'"}, {'raw_log': '2025-08-15T15:24:39.566389-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:24:39.565Z"}', 'parsing_error': 'Unable to parse message: \'2025-08-15T15:24:39.566389-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:24:39.565Z"}\\n\''}, {'raw_log': '2025-08-15T15:24:49.571317-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:24:49.570Z"}', 'parsing_error': 'Unable to parse message: \'2025-08-15T15:24:49.571317-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:24:49.570Z"}\\n\''}, {'raw_log': '2025-08-15T15:24:59.575913-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:24:59.575Z"}', 'parsing_error': 'Unable to parse message: \'2025-08-15T15:24:59.575913-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:24:59.575Z"}\\n\''}, {'raw_log': '2025-08-15T15:25:01.218427-05:00 homelab CRON[3104688]: (root) CMD (command -v debian-sa1 > /dev/null && debian-sa1 1 1)', 'parsing_error': "Unable to parse message: '2025-08-15T15:25:01.218427-05:00 homelab CRON[3104688]: (root) CMD (command -v debian-sa1 > /dev/null && debian-sa1 1 1)\\n'"}] 2025-08-15 15:25:10,225 - DEBUG - Raw ping output: PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. 64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=17.9 ms 64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=22.2 ms 64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=17.8 ms --- 8.8.8.8 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2003ms rtt min/avg/max/mdev = 17.780/19.285/22.167/2.038 ms 2025-08-15 15:25:10,227 - WARNING - Could not parse ping output with jc. Returning raw output. 2025-08-15 15:25:10,227 - INFO - Network Metrics: {'ping_output': 'PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=17.9 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=22.2 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=17.8 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2003ms\nrtt min/avg/max/mdev = 17.780/19.285/22.167/2.038 ms\n'} 2025-08-15 15:25:10,227 - INFO - Combined Data: { "system_logs": [ { "raw_log": "2025-08-15T15:24:38.789911-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.789562570Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..", "parsing_error": "Unable to parse message: '2025-08-15T15:24:38.789911-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.789562570Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..\\n'" }, { "raw_log": "2025-08-15T15:24:38.790072-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.789616879Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001", "parsing_error": "Unable to parse message: '2025-08-15T15:24:38.790072-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.789616879Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001\\n'" }, { "raw_log": "2025-08-15T15:24:38.790105-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.789662407Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/", "parsing_error": "Unable to parse message: '2025-08-15T15:24:38.790105-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.789662407Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/\\n'" }, { "raw_log": "2025-08-15T15:24:38.800515-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.800415024Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/", "parsing_error": "Unable to parse message: '2025-08-15T15:24:38.800515-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.800415024Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/\\n'" }, { "raw_log": "2025-08-15T15:24:38.802962-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.802847954Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running", "parsing_error": "Unable to parse message: '2025-08-15T15:24:38.802962-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.802847954Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running\\n'" }, { "raw_log": "2025-08-15T15:24:38.803038-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.802896671Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again", "parsing_error": "Unable to parse message: '2025-08-15T15:24:38.803038-05:00 homelab systembridge[1156]: 2025-08-15T20:24:38.802896671Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again\\n'" }, { "raw_log": "2025-08-15T15:24:39.566389-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:24:39.565Z\"}", "parsing_error": "Unable to parse message: '2025-08-15T15:24:39.566389-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:24:39.565Z\"}\\n'" }, { "raw_log": "2025-08-15T15:24:49.571317-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:24:49.570Z\"}", "parsing_error": "Unable to parse message: '2025-08-15T15:24:49.571317-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:24:49.570Z\"}\\n'" }, { "raw_log": "2025-08-15T15:24:59.575913-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:24:59.575Z\"}", "parsing_error": "Unable to parse message: '2025-08-15T15:24:59.575913-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:24:59.575Z\"}\\n'" }, { "raw_log": "2025-08-15T15:25:01.218427-05:00 homelab CRON[3104688]: (root) CMD (command -v debian-sa1 > /dev/null && debian-sa1 1 1)", "parsing_error": "Unable to parse message: '2025-08-15T15:25:01.218427-05:00 homelab CRON[3104688]: (root) CMD (command -v debian-sa1 > /dev/null && debian-sa1 1 1)\\n'" } ], "network_metrics": { "ping_output": "PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=17.9 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=22.2 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=17.8 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2003ms\nrtt min/avg/max/mdev = 17.780/19.285/22.167/2.038 ms\n" } } 2025-08-15 15:25:10,241 - DEBUG - connect_tcp.started host='192.168.2.114' port=11434 local_address=None timeout=None socket_options=None 2025-08-15 15:25:10,242 - DEBUG - connect_tcp.complete return_value= 2025-08-15 15:25:10,242 - DEBUG - send_request_headers.started request= 2025-08-15 15:25:10,242 - DEBUG - send_request_headers.complete 2025-08-15 15:25:10,242 - DEBUG - send_request_body.started request= 2025-08-15 15:25:10,242 - DEBUG - send_request_body.complete 2025-08-15 15:25:10,243 - DEBUG - receive_response_headers.started request= 2025-08-15 15:25:30,653 - DEBUG - receive_response_headers.complete return_value=(b'HTTP/1.1', 200, b'OK', [(b'Content-Type', b'application/json; charset=utf-8'), (b'Date', b'Fri, 15 Aug 2025 20:25:30 GMT'), (b'Transfer-Encoding', b'chunked')]) 2025-08-15 15:25:30,653 - INFO - HTTP Request: POST http://192.168.2.114:11434/api/generate "HTTP/1.1 200 OK" 2025-08-15 15:25:30,654 - DEBUG - receive_response_body.started request= 2025-08-15 15:25:30,654 - DEBUG - receive_response_body.complete 2025-08-15 15:25:30,654 - DEBUG - response_closed.started 2025-08-15 15:25:30,654 - DEBUG - response_closed.complete 2025-08-15 15:25:30,655 - INFO - LLM Response: After analyzing the system data, I have identified an anomaly in the network metrics. The system's ping output shows an unusual packet loss percentage of 0%, which is highly unlikely given the number of packets transmitted and received. Upon further inspection, I noticed that all three packets sent to 8.8.8.8 were successfully received, with only a single measurement of time (19.285 ms) being reported for the average round-trip time. This unusual pattern suggests that something may be interfering with or manipulating the ping results, potentially indicating a network anomaly or attack in progress. **Anomaly:** Unusual packet loss percentage and altered latency metrics in ping output. **Potential cause:** Network anomaly or attack (e.g., spoofing, tampering) affecting the system's ability to accurately report ping statistics. **Severity:** High 2025-08-15 15:25:30,655 - INFO - Anomaly detected, sending alerts... 2025-08-15 15:25:30,657 - DEBUG - Starting new HTTPS connection (1): discord.com:443 2025-08-15 15:25:30,870 - DEBUG - https://discord.com:443 "POST /api/webhooks/1024892743987773471/3Oh1KOw9tevBd-XtUkj8Rz2K4SePCFsxKmRrHhQw5spDeZKNzoyYoq6zC2cnTKo8VjJn?wait=True HTTP/1.1" 200 None 2025-08-15 15:25:30,872 - DEBUG - Webhook executed 2025-08-15 15:25:30,872 - INFO - Discord alert sent. 2025-08-15 15:25:30,873 - DEBUG - Starting new HTTP connection (1): 192.168.2.112:8123 2025-08-15 15:25:30,878 - DEBUG - http://192.168.2.112:8123 "POST /api/services/tts/speak HTTP/1.1" 200 10 2025-08-15 15:25:30,879 - INFO - Google Home alert sent. 2025-08-15 15:25:30,879 - INFO - --- Cycle Complete, sleeping for 5 minutes --- 2025-08-15 15:26:08,387 - INFO - --- Running Monitoring Cycle --- 2025-08-15 15:26:08,524 - WARNING - Error parsing individual syslog line: 2025-08-15T15:25:30.653284-05:00 homelab ollama[1614]: [GIN] 2025/08/15 - 15:25:30 | 200 | 20.41019356s | 192.168.2.114 | POST "/api/generate" - Unable to parse message: '2025-08-15T15:25:30.653284-05:00 homelab ollama[1614]: [GIN] 2025/08/15 - 15:25:30 | 200 | 20.41019356s | 192.168.2.114 | POST "/api/generate"\n' 2025-08-15 15:26:08,524 - WARNING - Error parsing individual syslog line: 2025-08-15T15:25:38.789266-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.788916785Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server.. - Unable to parse message: '2025-08-15T15:25:38.789266-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.788916785Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..\n' 2025-08-15 15:26:08,524 - WARNING - Error parsing individual syslog line: 2025-08-15T15:25:38.789425-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.788972873Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001 - Unable to parse message: '2025-08-15T15:25:38.789425-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.788972873Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001\n' 2025-08-15 15:26:08,524 - WARNING - Error parsing individual syslog line: 2025-08-15T15:25:38.789466-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.789019358Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/ - Unable to parse message: '2025-08-15T15:25:38.789466-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.789019358Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/\n' 2025-08-15 15:26:08,524 - WARNING - Error parsing individual syslog line: 2025-08-15T15:25:38.799769-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.799701056Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/ - Unable to parse message: '2025-08-15T15:25:38.799769-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.799701056Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/\n' 2025-08-15 15:26:08,524 - WARNING - Error parsing individual syslog line: 2025-08-15T15:25:38.802141-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.802033631Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running - Unable to parse message: '2025-08-15T15:25:38.802141-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.802033631Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running\n' 2025-08-15 15:26:08,525 - WARNING - Error parsing individual syslog line: 2025-08-15T15:25:38.802226-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.802076439Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again - Unable to parse message: '2025-08-15T15:25:38.802226-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.802076439Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again\n' 2025-08-15 15:26:08,525 - WARNING - Error parsing individual syslog line: 2025-08-15T15:25:39.595005-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:25:39.594Z"} - Unable to parse message: '2025-08-15T15:25:39.595005-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:25:39.594Z"}\n' 2025-08-15 15:26:08,525 - WARNING - Error parsing individual syslog line: 2025-08-15T15:25:49.598909-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:25:49.598Z"} - Unable to parse message: '2025-08-15T15:25:49.598909-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:25:49.598Z"}\n' 2025-08-15 15:26:08,525 - WARNING - Error parsing individual syslog line: 2025-08-15T15:25:59.602937-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:25:59.602Z"} - Unable to parse message: '2025-08-15T15:25:59.602937-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:25:59.602Z"}\n' 2025-08-15 15:26:08,525 - INFO - System Logs: [{'raw_log': '2025-08-15T15:25:30.653284-05:00 homelab ollama[1614]: [GIN] 2025/08/15 - 15:25:30 | 200 | 20.41019356s | 192.168.2.114 | POST "/api/generate"', 'parsing_error': 'Unable to parse message: \'2025-08-15T15:25:30.653284-05:00 homelab ollama[1614]: [GIN] 2025/08/15 - 15:25:30 | 200 | 20.41019356s | 192.168.2.114 | POST "/api/generate"\\n\''}, {'raw_log': '2025-08-15T15:25:38.789266-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.788916785Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..', 'parsing_error': "Unable to parse message: '2025-08-15T15:25:38.789266-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.788916785Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..\\n'"}, {'raw_log': '2025-08-15T15:25:38.789425-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.788972873Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001', 'parsing_error': "Unable to parse message: '2025-08-15T15:25:38.789425-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.788972873Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001\\n'"}, {'raw_log': '2025-08-15T15:25:38.789466-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.789019358Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/', 'parsing_error': "Unable to parse message: '2025-08-15T15:25:38.789466-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.789019358Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/\\n'"}, {'raw_log': '2025-08-15T15:25:38.799769-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.799701056Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/', 'parsing_error': "Unable to parse message: '2025-08-15T15:25:38.799769-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.799701056Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/\\n'"}, {'raw_log': '2025-08-15T15:25:38.802141-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.802033631Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running', 'parsing_error': "Unable to parse message: '2025-08-15T15:25:38.802141-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.802033631Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running\\n'"}, {'raw_log': '2025-08-15T15:25:38.802226-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.802076439Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again', 'parsing_error': "Unable to parse message: '2025-08-15T15:25:38.802226-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.802076439Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again\\n'"}, {'raw_log': '2025-08-15T15:25:39.595005-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:25:39.594Z"}', 'parsing_error': 'Unable to parse message: \'2025-08-15T15:25:39.595005-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:25:39.594Z"}\\n\''}, {'raw_log': '2025-08-15T15:25:49.598909-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:25:49.598Z"}', 'parsing_error': 'Unable to parse message: \'2025-08-15T15:25:49.598909-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:25:49.598Z"}\\n\''}, {'raw_log': '2025-08-15T15:25:59.602937-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:25:59.602Z"}', 'parsing_error': 'Unable to parse message: \'2025-08-15T15:25:59.602937-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:25:59.602Z"}\\n\''}] 2025-08-15 15:26:10,548 - DEBUG - Raw ping output: PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. 64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=17.6 ms 64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=18.5 ms 64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=17.2 ms --- 8.8.8.8 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2003ms rtt min/avg/max/mdev = 17.237/17.764/18.471/0.519 ms 2025-08-15 15:26:10,548 - INFO - Network Metrics: {'packet_loss_percent': 0.0, 'round_trip_ms_min': 17.237, 'round_trip_ms_avg': 17.764, 'round_trip_ms_max': 18.471, 'raw_ping_output': 'PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=17.6 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=18.5 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=17.2 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2003ms\nrtt min/avg/max/mdev = 17.237/17.764/18.471/0.519 ms\n'} 2025-08-15 15:26:10,548 - INFO - Combined Data: { "system_logs": [ { "raw_log": "2025-08-15T15:25:30.653284-05:00 homelab ollama[1614]: [GIN] 2025/08/15 - 15:25:30 | 200 | 20.41019356s | 192.168.2.114 | POST \"/api/generate\"", "parsing_error": "Unable to parse message: '2025-08-15T15:25:30.653284-05:00 homelab ollama[1614]: [GIN] 2025/08/15 - 15:25:30 | 200 | 20.41019356s | 192.168.2.114 | POST \"/api/generate\"\\n'" }, { "raw_log": "2025-08-15T15:25:38.789266-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.788916785Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..", "parsing_error": "Unable to parse message: '2025-08-15T15:25:38.789266-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.788916785Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..\\n'" }, { "raw_log": "2025-08-15T15:25:38.789425-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.788972873Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001", "parsing_error": "Unable to parse message: '2025-08-15T15:25:38.789425-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.788972873Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001\\n'" }, { "raw_log": "2025-08-15T15:25:38.789466-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.789019358Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/", "parsing_error": "Unable to parse message: '2025-08-15T15:25:38.789466-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.789019358Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/\\n'" }, { "raw_log": "2025-08-15T15:25:38.799769-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.799701056Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/", "parsing_error": "Unable to parse message: '2025-08-15T15:25:38.799769-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.799701056Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/\\n'" }, { "raw_log": "2025-08-15T15:25:38.802141-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.802033631Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running", "parsing_error": "Unable to parse message: '2025-08-15T15:25:38.802141-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.802033631Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running\\n'" }, { "raw_log": "2025-08-15T15:25:38.802226-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.802076439Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again", "parsing_error": "Unable to parse message: '2025-08-15T15:25:38.802226-05:00 homelab systembridge[1156]: 2025-08-15T20:25:38.802076439Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again\\n'" }, { "raw_log": "2025-08-15T15:25:39.595005-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:25:39.594Z\"}", "parsing_error": "Unable to parse message: '2025-08-15T15:25:39.595005-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:25:39.594Z\"}\\n'" }, { "raw_log": "2025-08-15T15:25:49.598909-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:25:49.598Z\"}", "parsing_error": "Unable to parse message: '2025-08-15T15:25:49.598909-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:25:49.598Z\"}\\n'" }, { "raw_log": "2025-08-15T15:25:59.602937-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:25:59.602Z\"}", "parsing_error": "Unable to parse message: '2025-08-15T15:25:59.602937-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:25:59.602Z\"}\\n'" } ], "network_metrics": { "packet_loss_percent": 0.0, "round_trip_ms_min": 17.237, "round_trip_ms_avg": 17.764, "round_trip_ms_max": 18.471, "raw_ping_output": "PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=17.6 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=18.5 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=17.2 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2003ms\nrtt min/avg/max/mdev = 17.237/17.764/18.471/0.519 ms\n" } } 2025-08-15 15:26:10,562 - DEBUG - connect_tcp.started host='192.168.2.114' port=11434 local_address=None timeout=None socket_options=None 2025-08-15 15:26:10,562 - DEBUG - connect_tcp.complete return_value= 2025-08-15 15:26:10,562 - DEBUG - send_request_headers.started request= 2025-08-15 15:26:10,563 - DEBUG - send_request_headers.complete 2025-08-15 15:26:10,563 - DEBUG - send_request_body.started request= 2025-08-15 15:26:10,565 - DEBUG - send_request_body.complete 2025-08-15 15:26:10,565 - DEBUG - receive_response_headers.started request= 2025-08-15 15:26:31,408 - DEBUG - receive_response_headers.complete return_value=(b'HTTP/1.1', 200, b'OK', [(b'Content-Type', b'application/json; charset=utf-8'), (b'Date', b'Fri, 15 Aug 2025 20:26:31 GMT'), (b'Transfer-Encoding', b'chunked')]) 2025-08-15 15:26:31,409 - INFO - HTTP Request: POST http://192.168.2.114:11434/api/generate "HTTP/1.1 200 OK" 2025-08-15 15:26:31,409 - DEBUG - receive_response_body.started request= 2025-08-15 15:26:31,409 - DEBUG - receive_response_body.complete 2025-08-15 15:26:31,410 - DEBUG - response_closed.started 2025-08-15 15:26:31,410 - DEBUG - response_closed.complete 2025-08-15 15:26:31,411 - INFO - LLM Response: After analyzing the provided data, I have identified an anomaly in the network metrics. **Anomaly Report** The packet loss percentage is 0.0%, which is extremely low and potentially indicative of a network issue. The potential cause of this anomaly could be related to the system or network configuration, but it may also indicate that there are no issues with packet transmission at this time. However, I would rate the severity of this anomaly as **low** because 0.0% packet loss is not typically considered abnormal in a stable network environment. Note: The other metrics, such as round trip times and ping statistics, appear to be within normal ranges, which further supports my conclusion that the low packet loss percentage is likely a non-issue rather than an actual anomaly. 2025-08-15 15:26:31,411 - INFO - Anomaly detected, sending alerts... 2025-08-15 15:26:31,414 - DEBUG - Starting new HTTPS connection (1): discord.com:443 2025-08-15 15:26:31,660 - DEBUG - https://discord.com:443 "POST /api/webhooks/1024892743987773471/3Oh1KOw9tevBd-XtUkj8Rz2K4SePCFsxKmRrHhQw5spDeZKNzoyYoq6zC2cnTKo8VjJn?wait=True HTTP/1.1" 200 None 2025-08-15 15:26:31,662 - DEBUG - Webhook executed 2025-08-15 15:26:31,662 - INFO - Discord alert sent. 2025-08-15 15:26:31,663 - DEBUG - Starting new HTTP connection (1): 192.168.2.112:8123 2025-08-15 15:26:31,673 - DEBUG - http://192.168.2.112:8123 "POST /api/services/tts/speak HTTP/1.1" 200 10 2025-08-15 15:26:31,673 - INFO - Google Home alert sent. 2025-08-15 15:26:31,674 - INFO - --- Cycle Complete, sleeping for 5 minutes --- 2025-08-15 15:28:37,727 - INFO - --- Running Monitoring Cycle --- 2025-08-15 15:28:37,864 - WARNING - Error parsing individual syslog line: 2025-08-15T15:27:38.789902-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.789326532Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/ - Unable to parse message: '2025-08-15T15:27:38.789902-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.789326532Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/\n' 2025-08-15 15:28:37,864 - WARNING - Error parsing individual syslog line: 2025-08-15T15:27:38.801096-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.801028634Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/ - Unable to parse message: '2025-08-15T15:27:38.801096-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.801028634Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/\n' 2025-08-15 15:28:37,864 - WARNING - Error parsing individual syslog line: 2025-08-15T15:27:38.803342-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.803269716Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running - Unable to parse message: '2025-08-15T15:27:38.803342-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.803269716Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running\n' 2025-08-15 15:28:37,864 - WARNING - Error parsing individual syslog line: 2025-08-15T15:27:38.803646-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.803314699Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again - Unable to parse message: '2025-08-15T15:27:38.803646-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.803314699Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again\n' 2025-08-15 15:28:37,864 - WARNING - Error parsing individual syslog line: 2025-08-15T15:27:39.647324-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:27:39.646Z"} - Unable to parse message: '2025-08-15T15:27:39.647324-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:27:39.646Z"}\n' 2025-08-15 15:28:37,864 - WARNING - Error parsing individual syslog line: 2025-08-15T15:27:49.651908-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:27:49.651Z"} - Unable to parse message: '2025-08-15T15:27:49.651908-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:27:49.651Z"}\n' 2025-08-15 15:28:37,865 - WARNING - Error parsing individual syslog line: 2025-08-15T15:27:59.654785-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:27:59.654Z"} - Unable to parse message: '2025-08-15T15:27:59.654785-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:27:59.654Z"}\n' 2025-08-15 15:28:37,865 - WARNING - Error parsing individual syslog line: 2025-08-15T15:28:09.659079-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:28:09.658Z"} - Unable to parse message: '2025-08-15T15:28:09.659079-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:28:09.658Z"}\n' 2025-08-15 15:28:37,865 - WARNING - Error parsing individual syslog line: 2025-08-15T15:28:19.664625-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:28:19.663Z"} - Unable to parse message: '2025-08-15T15:28:19.664625-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:28:19.663Z"}\n' 2025-08-15 15:28:37,865 - WARNING - Error parsing individual syslog line: 2025-08-15T15:28:29.669188-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:28:29.668Z"} - Unable to parse message: '2025-08-15T15:28:29.669188-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:28:29.668Z"}\n' 2025-08-15 15:28:37,865 - INFO - System Logs: [{'raw_log': '2025-08-15T15:27:38.789902-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.789326532Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/', 'parsing_error': "Unable to parse message: '2025-08-15T15:27:38.789902-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.789326532Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/\\n'"}, {'raw_log': '2025-08-15T15:27:38.801096-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.801028634Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/', 'parsing_error': "Unable to parse message: '2025-08-15T15:27:38.801096-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.801028634Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/\\n'"}, {'raw_log': '2025-08-15T15:27:38.803342-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.803269716Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running', 'parsing_error': "Unable to parse message: '2025-08-15T15:27:38.803342-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.803269716Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running\\n'"}, {'raw_log': '2025-08-15T15:27:38.803646-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.803314699Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again', 'parsing_error': "Unable to parse message: '2025-08-15T15:27:38.803646-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.803314699Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again\\n'"}, {'raw_log': '2025-08-15T15:27:39.647324-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:27:39.646Z"}', 'parsing_error': 'Unable to parse message: \'2025-08-15T15:27:39.647324-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:27:39.646Z"}\\n\''}, {'raw_log': '2025-08-15T15:27:49.651908-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:27:49.651Z"}', 'parsing_error': 'Unable to parse message: \'2025-08-15T15:27:49.651908-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:27:49.651Z"}\\n\''}, {'raw_log': '2025-08-15T15:27:59.654785-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:27:59.654Z"}', 'parsing_error': 'Unable to parse message: \'2025-08-15T15:27:59.654785-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:27:59.654Z"}\\n\''}, {'raw_log': '2025-08-15T15:28:09.659079-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:28:09.658Z"}', 'parsing_error': 'Unable to parse message: \'2025-08-15T15:28:09.659079-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:28:09.658Z"}\\n\''}, {'raw_log': '2025-08-15T15:28:19.664625-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:28:19.663Z"}', 'parsing_error': 'Unable to parse message: \'2025-08-15T15:28:19.664625-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:28:19.663Z"}\\n\''}, {'raw_log': '2025-08-15T15:28:29.669188-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:28:29.668Z"}', 'parsing_error': 'Unable to parse message: \'2025-08-15T15:28:29.669188-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:28:29.668Z"}\\n\''}] 2025-08-15 15:28:39,886 - DEBUG - Raw ping output: PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. 64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=17.1 ms 64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=28.2 ms 64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=16.9 ms --- 8.8.8.8 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2002ms rtt min/avg/max/mdev = 16.921/20.732/28.179/5.266 ms 2025-08-15 15:28:39,887 - INFO - Network Metrics: {'packet_loss_percent': 0.0, 'round_trip_ms_min': 16.921, 'round_trip_ms_avg': 20.732, 'round_trip_ms_max': 28.179, 'raw_ping_output': 'PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=17.1 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=28.2 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=16.9 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2002ms\nrtt min/avg/max/mdev = 16.921/20.732/28.179/5.266 ms\n'} 2025-08-15 15:28:39,887 - INFO - Combined Data: { "system_logs": [ { "raw_log": "2025-08-15T15:27:38.789902-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.789326532Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/", "parsing_error": "Unable to parse message: '2025-08-15T15:27:38.789902-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.789326532Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/\\n'" }, { "raw_log": "2025-08-15T15:27:38.801096-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.801028634Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/", "parsing_error": "Unable to parse message: '2025-08-15T15:27:38.801096-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.801028634Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/\\n'" }, { "raw_log": "2025-08-15T15:27:38.803342-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.803269716Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running", "parsing_error": "Unable to parse message: '2025-08-15T15:27:38.803342-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.803269716Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running\\n'" }, { "raw_log": "2025-08-15T15:27:38.803646-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.803314699Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again", "parsing_error": "Unable to parse message: '2025-08-15T15:27:38.803646-05:00 homelab systembridge[1156]: 2025-08-15T20:27:38.803314699Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again\\n'" }, { "raw_log": "2025-08-15T15:27:39.647324-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:27:39.646Z\"}", "parsing_error": "Unable to parse message: '2025-08-15T15:27:39.647324-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:27:39.646Z\"}\\n'" }, { "raw_log": "2025-08-15T15:27:49.651908-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:27:49.651Z\"}", "parsing_error": "Unable to parse message: '2025-08-15T15:27:49.651908-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:27:49.651Z\"}\\n'" }, { "raw_log": "2025-08-15T15:27:59.654785-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:27:59.654Z\"}", "parsing_error": "Unable to parse message: '2025-08-15T15:27:59.654785-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:27:59.654Z\"}\\n'" }, { "raw_log": "2025-08-15T15:28:09.659079-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:28:09.658Z\"}", "parsing_error": "Unable to parse message: '2025-08-15T15:28:09.659079-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:28:09.658Z\"}\\n'" }, { "raw_log": "2025-08-15T15:28:19.664625-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:28:19.663Z\"}", "parsing_error": "Unable to parse message: '2025-08-15T15:28:19.664625-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:28:19.663Z\"}\\n'" }, { "raw_log": "2025-08-15T15:28:29.669188-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:28:29.668Z\"}", "parsing_error": "Unable to parse message: '2025-08-15T15:28:29.669188-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:28:29.668Z\"}\\n'" } ], "network_metrics": { "packet_loss_percent": 0.0, "round_trip_ms_min": 16.921, "round_trip_ms_avg": 20.732, "round_trip_ms_max": 28.179, "raw_ping_output": "PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=17.1 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=28.2 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=16.9 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2002ms\nrtt min/avg/max/mdev = 16.921/20.732/28.179/5.266 ms\n" } } 2025-08-15 15:28:39,900 - DEBUG - connect_tcp.started host='192.168.2.114' port=11434 local_address=None timeout=None socket_options=None 2025-08-15 15:28:39,900 - DEBUG - connect_tcp.complete return_value= 2025-08-15 15:28:39,900 - DEBUG - send_request_headers.started request= 2025-08-15 15:28:39,901 - DEBUG - send_request_headers.complete 2025-08-15 15:28:39,901 - DEBUG - send_request_body.started request= 2025-08-15 15:28:39,901 - DEBUG - send_request_body.complete 2025-08-15 15:28:39,901 - DEBUG - receive_response_headers.started request= 2025-08-15 15:29:04,072 - DEBUG - receive_response_headers.complete return_value=(b'HTTP/1.1', 200, b'OK', [(b'Content-Type', b'application/json; charset=utf-8'), (b'Date', b'Fri, 15 Aug 2025 20:29:04 GMT'), (b'Transfer-Encoding', b'chunked')]) 2025-08-15 15:29:04,073 - INFO - HTTP Request: POST http://192.168.2.114:11434/api/generate "HTTP/1.1 200 OK" 2025-08-15 15:29:04,073 - DEBUG - receive_response_body.started request= 2025-08-15 15:29:04,073 - DEBUG - receive_response_body.complete 2025-08-15 15:29:04,074 - DEBUG - response_closed.started 2025-08-15 15:29:04,074 - DEBUG - response_closed.complete 2025-08-15 15:29:04,074 - INFO - LLM Response: After analyzing the provided system data in JSON format, I have identified a concerning anomaly. The anomaly is located in the network metrics section under "round_trip_ms_avg". The average round-trip time (RTT) for pinging 8.8.8.8 is reported as 20.732 ms, which is higher than the minimum RTT of 16.921 ms and the maximum RTT of 28.179 ms. The potential cause of this anomaly could be network congestion or packet loss between the host and the destination server (8.8.8.8). The high average RTT value may indicate that there are issues with the network connection, which could lead to poor application performance or even connectivity issues. I would classify the severity of this anomaly as medium. While it's not a critical issue at the moment, prolonged periods of high RTTs can impact user experience and lead to decreased productivity. **Anomaly Report:** A concerning anomaly has been found in the network metrics, specifically in the average round-trip time (RTT) for pinging 8.8.8.8, which is significantly higher than expected at 20.732 ms. This may indicate network congestion or packet loss between the host and the destination server, potentially causing poor application performance or connectivity issues. Severity: Medium. 2025-08-15 15:29:04,074 - INFO - Anomaly detected, sending alerts... 2025-08-15 15:29:04,076 - DEBUG - Starting new HTTPS connection (1): discord.com:443 2025-08-15 15:29:04,346 - DEBUG - https://discord.com:443 "POST /api/webhooks/1024892743987773471/3Oh1KOw9tevBd-XtUkj8Rz2K4SePCFsxKmRrHhQw5spDeZKNzoyYoq6zC2cnTKo8VjJn?wait=True HTTP/1.1" 200 None 2025-08-15 15:29:04,347 - DEBUG - Webhook executed 2025-08-15 15:29:04,347 - INFO - Discord alert sent. 2025-08-15 15:29:04,348 - DEBUG - Starting new HTTP connection (1): 192.168.2.112:8123 2025-08-15 15:29:04,362 - DEBUG - http://192.168.2.112:8123 "POST /api/services/tts/speak HTTP/1.1" 200 10 2025-08-15 15:29:04,363 - INFO - Google Home alert sent. 2025-08-15 15:29:04,363 - INFO - --- Cycle Complete, sleeping for 5 minutes --- 2025-08-15 15:34:11,152 - INFO - --- Running Monitoring Cycle --- 2025-08-15 15:34:11,291 - WARNING - Error parsing individual syslog line: 2025-08-15T15:33:38.789979-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.789628224Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server.. - Unable to parse message: '2025-08-15T15:33:38.789979-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.789628224Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..\n' 2025-08-15 15:34:11,292 - WARNING - Error parsing individual syslog line: 2025-08-15T15:33:38.790142-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.789689228Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001 - Unable to parse message: '2025-08-15T15:33:38.790142-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.789689228Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001\n' 2025-08-15 15:34:11,292 - WARNING - Error parsing individual syslog line: 2025-08-15T15:33:38.790175-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.789739623Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/ - Unable to parse message: '2025-08-15T15:33:38.790175-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.789739623Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/\n' 2025-08-15 15:34:11,292 - WARNING - Error parsing individual syslog line: 2025-08-15T15:33:38.800605-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.800388919Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/ - Unable to parse message: '2025-08-15T15:33:38.800605-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.800388919Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/\n' 2025-08-15 15:34:11,292 - WARNING - Error parsing individual syslog line: 2025-08-15T15:33:38.803109-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.803042154Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running - Unable to parse message: '2025-08-15T15:33:38.803109-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.803042154Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running\n' 2025-08-15 15:34:11,292 - WARNING - Error parsing individual syslog line: 2025-08-15T15:33:38.803275-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.803219115Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again - Unable to parse message: '2025-08-15T15:33:38.803275-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.803219115Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again\n' 2025-08-15 15:34:11,292 - WARNING - Error parsing individual syslog line: 2025-08-15T15:33:39.802251-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:33:39.801Z"} - Unable to parse message: '2025-08-15T15:33:39.802251-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:33:39.801Z"}\n' 2025-08-15 15:34:11,292 - WARNING - Error parsing individual syslog line: 2025-08-15T15:33:49.807197-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:33:49.806Z"} - Unable to parse message: '2025-08-15T15:33:49.807197-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:33:49.806Z"}\n' 2025-08-15 15:34:11,292 - WARNING - Error parsing individual syslog line: 2025-08-15T15:33:59.811893-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:33:59.811Z"} - Unable to parse message: '2025-08-15T15:33:59.811893-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:33:59.811Z"}\n' 2025-08-15 15:34:11,292 - WARNING - Error parsing individual syslog line: 2025-08-15T15:34:09.817923-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:34:09.816Z"} - Unable to parse message: '2025-08-15T15:34:09.817923-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:34:09.816Z"}\n' 2025-08-15 15:34:11,293 - INFO - System Logs: [{'raw_log': '2025-08-15T15:33:38.789979-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.789628224Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..', 'parsing_error': "Unable to parse message: '2025-08-15T15:33:38.789979-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.789628224Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..\\n'"}, {'raw_log': '2025-08-15T15:33:38.790142-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.789689228Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001', 'parsing_error': "Unable to parse message: '2025-08-15T15:33:38.790142-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.789689228Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001\\n'"}, {'raw_log': '2025-08-15T15:33:38.790175-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.789739623Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/', 'parsing_error': "Unable to parse message: '2025-08-15T15:33:38.790175-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.789739623Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/\\n'"}, {'raw_log': '2025-08-15T15:33:38.800605-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.800388919Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/', 'parsing_error': "Unable to parse message: '2025-08-15T15:33:38.800605-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.800388919Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/\\n'"}, {'raw_log': '2025-08-15T15:33:38.803109-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.803042154Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running', 'parsing_error': "Unable to parse message: '2025-08-15T15:33:38.803109-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.803042154Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running\\n'"}, {'raw_log': '2025-08-15T15:33:38.803275-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.803219115Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again', 'parsing_error': "Unable to parse message: '2025-08-15T15:33:38.803275-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.803219115Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again\\n'"}, {'raw_log': '2025-08-15T15:33:39.802251-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:33:39.801Z"}', 'parsing_error': 'Unable to parse message: \'2025-08-15T15:33:39.802251-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:33:39.801Z"}\\n\''}, {'raw_log': '2025-08-15T15:33:49.807197-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:33:49.806Z"}', 'parsing_error': 'Unable to parse message: \'2025-08-15T15:33:49.807197-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:33:49.806Z"}\\n\''}, {'raw_log': '2025-08-15T15:33:59.811893-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:33:59.811Z"}', 'parsing_error': 'Unable to parse message: \'2025-08-15T15:33:59.811893-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:33:59.811Z"}\\n\''}, {'raw_log': '2025-08-15T15:34:09.817923-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:34:09.816Z"}', 'parsing_error': 'Unable to parse message: \'2025-08-15T15:34:09.817923-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:34:09.816Z"}\\n\''}] 2025-08-15 15:34:13,318 - DEBUG - Raw ping output: PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. 64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=17.4 ms 64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=17.3 ms 64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=20.3 ms --- 8.8.8.8 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2003ms rtt min/avg/max/mdev = 17.297/18.307/20.263/1.382 ms 2025-08-15 15:34:13,318 - INFO - Network Metrics: {'packet_loss_percent': 0.0, 'round_trip_ms_min': 17.297, 'round_trip_ms_avg': 18.307, 'round_trip_ms_max': 20.263, 'raw_ping_output': 'PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=17.4 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=17.3 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=20.3 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2003ms\nrtt min/avg/max/mdev = 17.297/18.307/20.263/1.382 ms\n'} 2025-08-15 15:34:13,318 - INFO - Combined Data: { "system_logs": [ { "raw_log": "2025-08-15T15:33:38.789979-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.789628224Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..", "parsing_error": "Unable to parse message: '2025-08-15T15:33:38.789979-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.789628224Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..\\n'" }, { "raw_log": "2025-08-15T15:33:38.790142-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.789689228Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001", "parsing_error": "Unable to parse message: '2025-08-15T15:33:38.790142-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.789689228Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001\\n'" }, { "raw_log": "2025-08-15T15:33:38.790175-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.789739623Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/", "parsing_error": "Unable to parse message: '2025-08-15T15:33:38.790175-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.789739623Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/\\n'" }, { "raw_log": "2025-08-15T15:33:38.800605-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.800388919Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/", "parsing_error": "Unable to parse message: '2025-08-15T15:33:38.800605-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.800388919Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/\\n'" }, { "raw_log": "2025-08-15T15:33:38.803109-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.803042154Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running", "parsing_error": "Unable to parse message: '2025-08-15T15:33:38.803109-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.803042154Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running\\n'" }, { "raw_log": "2025-08-15T15:33:38.803275-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.803219115Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again", "parsing_error": "Unable to parse message: '2025-08-15T15:33:38.803275-05:00 homelab systembridge[1156]: 2025-08-15T20:33:38.803219115Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again\\n'" }, { "raw_log": "2025-08-15T15:33:39.802251-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:33:39.801Z\"}", "parsing_error": "Unable to parse message: '2025-08-15T15:33:39.802251-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:33:39.801Z\"}\\n'" }, { "raw_log": "2025-08-15T15:33:49.807197-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:33:49.806Z\"}", "parsing_error": "Unable to parse message: '2025-08-15T15:33:49.807197-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:33:49.806Z\"}\\n'" }, { "raw_log": "2025-08-15T15:33:59.811893-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:33:59.811Z\"}", "parsing_error": "Unable to parse message: '2025-08-15T15:33:59.811893-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:33:59.811Z\"}\\n'" }, { "raw_log": "2025-08-15T15:34:09.817923-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:34:09.816Z\"}", "parsing_error": "Unable to parse message: '2025-08-15T15:34:09.817923-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:34:09.816Z\"}\\n'" } ], "network_metrics": { "packet_loss_percent": 0.0, "round_trip_ms_min": 17.297, "round_trip_ms_avg": 18.307, "round_trip_ms_max": 20.263, "raw_ping_output": "PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=17.4 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=17.3 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=20.3 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2003ms\nrtt min/avg/max/mdev = 17.297/18.307/20.263/1.382 ms\n" } } 2025-08-15 15:34:13,331 - DEBUG - connect_tcp.started host='192.168.2.114' port=11434 local_address=None timeout=None socket_options=None 2025-08-15 15:34:13,332 - DEBUG - connect_tcp.complete return_value= 2025-08-15 15:34:13,332 - DEBUG - send_request_headers.started request= 2025-08-15 15:34:13,332 - DEBUG - send_request_headers.complete 2025-08-15 15:34:13,332 - DEBUG - send_request_body.started request= 2025-08-15 15:34:13,332 - DEBUG - send_request_body.complete 2025-08-15 15:34:13,333 - DEBUG - receive_response_headers.started request= 2025-08-15 15:34:38,787 - DEBUG - receive_response_headers.complete return_value=(b'HTTP/1.1', 200, b'OK', [(b'Content-Type', b'application/json; charset=utf-8'), (b'Date', b'Fri, 15 Aug 2025 20:34:38 GMT'), (b'Transfer-Encoding', b'chunked')]) 2025-08-15 15:34:38,787 - INFO - HTTP Request: POST http://192.168.2.114:11434/api/generate "HTTP/1.1 200 OK" 2025-08-15 15:34:38,788 - DEBUG - receive_response_body.started request= 2025-08-15 15:34:38,788 - DEBUG - receive_response_body.complete 2025-08-15 15:34:38,788 - DEBUG - response_closed.started 2025-08-15 15:34:38,788 - DEBUG - response_closed.complete 2025-08-15 15:34:38,789 - INFO - LLM Response: After analyzing the provided data, I have identified a concerning anomaly. **Anomaly:** The node process is unable to establish a connection with the expected host and instead connects to another IP address (8.8.8.8), resulting in an average round trip time of 18.307ms. **Potential Cause:** This could be due to a misconfigured DNS server or a temporary issue with network routing, causing the node process to default to the Google public DNS resolver. **Severity:** Medium This anomaly is concerning because it indicates that the node process may not be able to connect to its expected host, potentially leading to data loss or communication delays. Further investigation and monitoring are necessary to determine the root cause of this issue. OK 2025-08-15 15:34:38,789 - INFO - Anomaly detected, sending alerts... 2025-08-15 15:34:38,791 - DEBUG - Starting new HTTPS connection (1): discord.com:443 2025-08-15 15:34:39,080 - DEBUG - https://discord.com:443 "POST /api/webhooks/1024892743987773471/3Oh1KOw9tevBd-XtUkj8Rz2K4SePCFsxKmRrHhQw5spDeZKNzoyYoq6zC2cnTKo8VjJn?wait=True HTTP/1.1" 200 None 2025-08-15 15:34:39,081 - DEBUG - Webhook executed 2025-08-15 15:34:39,081 - INFO - Discord alert sent. 2025-08-15 15:34:39,082 - DEBUG - Starting new HTTP connection (1): 192.168.2.112:8123 2025-08-15 15:34:39,088 - DEBUG - http://192.168.2.112:8123 "POST /api/services/tts/speak HTTP/1.1" 200 10 2025-08-15 15:34:39,089 - INFO - Google Home alert sent. 2025-08-15 15:34:39,089 - INFO - --- Cycle Complete, sleeping for 5 minutes --- 2025-08-15 15:38:51,847 - INFO - --- Running Monitoring Cycle --- 2025-08-15 15:40:15,763 - INFO - --- Running Monitoring Cycle --- 2025-08-15 15:41:11,923 - INFO - --- Running Monitoring Cycle --- 2025-08-15 15:41:12,059 - DEBUG - RFC5424 parsing failed for: 2025-08-15T15:40:38.789939-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.789573247Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server.. - Unable to parse message: '2025-08-15T15:40:38.789939-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.789573247Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..' 2025-08-15 15:41:12,060 - WARNING - Fallback regex parsing failed for: 2025-08-15T15:40:38.789939-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.789573247Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server.. - not enough values to unpack (expected 5, got 4) 2025-08-15 15:41:12,060 - DEBUG - RFC5424 parsing failed for: 2025-08-15T15:40:38.790108-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.789628572Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001 - Unable to parse message: '2025-08-15T15:40:38.790108-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.789628572Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001' 2025-08-15 15:41:12,060 - WARNING - Fallback regex parsing failed for: 2025-08-15T15:40:38.790108-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.789628572Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001 - not enough values to unpack (expected 5, got 4) 2025-08-15 15:41:12,060 - DEBUG - RFC5424 parsing failed for: 2025-08-15T15:40:38.790147-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.789673092Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/ - Unable to parse message: '2025-08-15T15:40:38.790147-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.789673092Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/' 2025-08-15 15:41:12,060 - WARNING - Fallback regex parsing failed for: 2025-08-15T15:40:38.790147-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.789673092Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/ - not enough values to unpack (expected 5, got 4) 2025-08-15 15:41:12,060 - DEBUG - RFC5424 parsing failed for: 2025-08-15T15:40:38.800468-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.800396551Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/ - Unable to parse message: '2025-08-15T15:40:38.800468-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.800396551Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/' 2025-08-15 15:41:12,060 - WARNING - Fallback regex parsing failed for: 2025-08-15T15:40:38.800468-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.800396551Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/ - not enough values to unpack (expected 5, got 4) 2025-08-15 15:41:12,060 - DEBUG - RFC5424 parsing failed for: 2025-08-15T15:40:38.802752-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.802687334Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running - Unable to parse message: '2025-08-15T15:40:38.802752-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.802687334Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running' 2025-08-15 15:41:12,060 - WARNING - Fallback regex parsing failed for: 2025-08-15T15:40:38.802752-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.802687334Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running - not enough values to unpack (expected 5, got 4) 2025-08-15 15:41:12,060 - DEBUG - RFC5424 parsing failed for: 2025-08-15T15:40:38.802832-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.802727886Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again - Unable to parse message: '2025-08-15T15:40:38.802832-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.802727886Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again' 2025-08-15 15:41:12,061 - WARNING - Fallback regex parsing failed for: 2025-08-15T15:40:38.802832-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.802727886Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again - not enough values to unpack (expected 5, got 4) 2025-08-15 15:41:12,061 - DEBUG - RFC5424 parsing failed for: 2025-08-15T15:40:40.006980-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:40:40.006Z"} - Unable to parse message: '2025-08-15T15:40:40.006980-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:40:40.006Z"}' 2025-08-15 15:41:12,061 - WARNING - Fallback regex parsing failed for: 2025-08-15T15:40:40.006980-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:40:40.006Z"} - not enough values to unpack (expected 5, got 4) 2025-08-15 15:41:12,061 - DEBUG - RFC5424 parsing failed for: 2025-08-15T15:40:50.011902-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:40:50.011Z"} - Unable to parse message: '2025-08-15T15:40:50.011902-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:40:50.011Z"}' 2025-08-15 15:41:12,061 - WARNING - Fallback regex parsing failed for: 2025-08-15T15:40:50.011902-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:40:50.011Z"} - not enough values to unpack (expected 5, got 4) 2025-08-15 15:41:12,061 - DEBUG - RFC5424 parsing failed for: 2025-08-15T15:41:00.017069-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:41:00.016Z"} - Unable to parse message: '2025-08-15T15:41:00.017069-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:41:00.016Z"}' 2025-08-15 15:41:12,061 - WARNING - Fallback regex parsing failed for: 2025-08-15T15:41:00.017069-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:41:00.016Z"} - not enough values to unpack (expected 5, got 4) 2025-08-15 15:41:12,061 - DEBUG - RFC5424 parsing failed for: 2025-08-15T15:41:10.021601-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:41:10.021Z"} - Unable to parse message: '2025-08-15T15:41:10.021601-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:41:10.021Z"}' 2025-08-15 15:41:12,061 - WARNING - Fallback regex parsing failed for: 2025-08-15T15:41:10.021601-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:41:10.021Z"} - not enough values to unpack (expected 5, got 4) 2025-08-15 15:41:12,061 - INFO - System Logs: [{'raw_log': '2025-08-15T15:40:38.789939-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.789573247Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-15T15:40:38.790108-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.789628572Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-15T15:40:38.790147-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.789673092Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-15T15:40:38.800468-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.800396551Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-15T15:40:38.802752-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.802687334Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-15T15:40:38.802832-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.802727886Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-15T15:40:40.006980-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:40:40.006Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-15T15:40:50.011902-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:40:50.011Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-15T15:41:00.017069-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:41:00.016Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-15T15:41:10.021601-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-15T20:41:10.021Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}] 2025-08-15 15:41:14,089 - DEBUG - Raw ping output: PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. 64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=19.6 ms 64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=18.6 ms 64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=22.8 ms --- 8.8.8.8 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2003ms rtt min/avg/max/mdev = 18.551/20.344/22.841/1.820 ms 2025-08-15 15:41:14,090 - INFO - Network Metrics: {'packet_loss_percent': 0.0, 'round_trip_ms_min': 18.551, 'round_trip_ms_avg': 20.344, 'round_trip_ms_max': 22.841, 'raw_ping_output': 'PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=19.6 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=18.6 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=22.8 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2003ms\nrtt min/avg/max/mdev = 18.551/20.344/22.841/1.820 ms\n'} 2025-08-15 15:41:14,090 - INFO - Combined Data: { "system_logs": [ { "raw_log": "2025-08-15T15:40:38.789939-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.789573247Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-15T15:40:38.790108-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.789628572Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-15T15:40:38.790147-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.789673092Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-15T15:40:38.800468-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.800396551Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-15T15:40:38.802752-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.802687334Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-15T15:40:38.802832-05:00 homelab systembridge[1156]: 2025-08-15T20:40:38.802727886Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-15T15:40:40.006980-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:40:40.006Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-15T15:40:50.011902-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:40:50.011Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-15T15:41:00.017069-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:41:00.016Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-15T15:41:10.021601-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-15T20:41:10.021Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" } ], "network_metrics": { "packet_loss_percent": 0.0, "round_trip_ms_min": 18.551, "round_trip_ms_avg": 20.344, "round_trip_ms_max": 22.841, "raw_ping_output": "PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=19.6 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=18.6 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=22.8 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2003ms\nrtt min/avg/max/mdev = 18.551/20.344/22.841/1.820 ms\n" } } 2025-08-15 15:41:14,104 - DEBUG - connect_tcp.started host='192.168.2.114' port=11434 local_address=None timeout=None socket_options=None 2025-08-15 15:41:14,104 - DEBUG - connect_tcp.complete return_value= 2025-08-15 15:41:14,104 - DEBUG - send_request_headers.started request= 2025-08-15 15:41:14,105 - DEBUG - send_request_headers.complete 2025-08-15 15:41:14,105 - DEBUG - send_request_body.started request= 2025-08-15 15:41:14,106 - DEBUG - send_request_body.complete 2025-08-15 15:41:14,106 - DEBUG - receive_response_headers.started request= 2025-08-15 15:41:39,180 - DEBUG - receive_response_headers.complete return_value=(b'HTTP/1.1', 200, b'OK', [(b'Content-Type', b'application/json; charset=utf-8'), (b'Date', b'Fri, 15 Aug 2025 20:41:39 GMT'), (b'Transfer-Encoding', b'chunked')]) 2025-08-15 15:41:39,181 - INFO - HTTP Request: POST http://192.168.2.114:11434/api/generate "HTTP/1.1 200 OK" 2025-08-15 15:41:39,181 - DEBUG - receive_response_body.started request= 2025-08-15 15:41:39,182 - DEBUG - receive_response_body.complete 2025-08-15 15:41:39,182 - DEBUG - response_closed.started 2025-08-15 15:41:39,182 - DEBUG - response_closed.complete 2025-08-15 15:41:39,183 - INFO - LLM Response: After analyzing the provided system data, I have identified no concerning anomalies in the network metrics section. However, I found an issue in the system logs that warrants attention. The parsing errors in the system logs are indicative of a potential problem with the log parsing mechanism. The error "Fallback regex failed: not enough values to unpack (expected 5, got 4)" suggests that there is an inconsistency in the log format, which may be causing issues with data interpretation or processing. This issue is considered **medium** severity as it may lead to incomplete or inaccurate logging, but it does not directly imply a security breach or network connectivity problem. Therefore, I recommend investigating and resolving this issue by reviewing the log parsing mechanism and adjusting it to handle the inconsistent log format. Additionally, I would like to note that there are no failed login attempts, unauthorized access, or unusual network connections reported in the provided system data. The network metrics section shows a stable connection with minor fluctuations in Round Trip Time (RTT), which is considered normal network variance. In summary, while there is a medium-severity issue related to log parsing errors, I do not consider this a security-related anomaly and recommend further investigation to resolve it. 2025-08-15 15:41:39,183 - INFO - Anomaly detected, sending alerts... 2025-08-15 15:41:39,185 - DEBUG - Starting new HTTPS connection (1): discord.com:443 2025-08-15 15:41:39,389 - DEBUG - https://discord.com:443 "POST /api/webhooks/1024892743987773471/3Oh1KOw9tevBd-XtUkj8Rz2K4SePCFsxKmRrHhQw5spDeZKNzoyYoq6zC2cnTKo8VjJn?wait=True HTTP/1.1" 200 None 2025-08-15 15:41:39,390 - DEBUG - Webhook executed 2025-08-15 15:41:39,390 - INFO - Discord alert sent. 2025-08-15 15:41:39,391 - DEBUG - Starting new HTTP connection (1): 192.168.2.112:8123 2025-08-15 15:41:39,399 - DEBUG - http://192.168.2.112:8123 "POST /api/services/tts/speak HTTP/1.1" 200 10 2025-08-15 15:41:39,399 - INFO - Google Home alert sent. 2025-08-15 15:41:39,400 - INFO - --- Cycle Complete, sleeping for 5 minutes --- 2025-08-17 20:01:34,498 - INFO - --- Running Monitoring Cycle --- 2025-08-17 20:01:34,505 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:00:57.107829-05:00 homelab NetworkManager[1152]: [1755478857.1075] ndisc[0x649e9873a2d0,"enp0s31f6"]: solicit: failure sending router solicitation: Address family not supported by protocol (97) - Unable to parse message: '2025-08-17T20:00:57.107829-05:00 homelab NetworkManager[1152]: [1755478857.1075] ndisc[0x649e9873a2d0,"enp0s31f6"]: solicit: failure sending router solicitation: Address family not supported by protocol (97)' 2025-08-17 20:01:34,505 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:00:57.107829-05:00 homelab NetworkManager[1152]: [1755478857.1075] ndisc[0x649e9873a2d0,"enp0s31f6"]: solicit: failure sending router solicitation: Address family not supported by protocol (97) - not enough values to unpack (expected 5, got 4) 2025-08-17 20:01:34,505 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:01:00.867288-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254 - Unable to parse message: '2025-08-17T20:01:00.867288-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254' 2025-08-17 20:01:34,505 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:01:00.867288-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254 - not enough values to unpack (expected 5, got 4) 2025-08-17 20:01:34,505 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:01:00.867480-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254 - Unable to parse message: '2025-08-17T20:01:00.867480-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254' 2025-08-17 20:01:34,505 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:01:00.867480-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254 - not enough values to unpack (expected 5, got 4) 2025-08-17 20:01:34,505 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:01:00.867518-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254 - Unable to parse message: '2025-08-17T20:01:00.867518-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254' 2025-08-17 20:01:34,505 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:01:00.867518-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254 - not enough values to unpack (expected 5, got 4) 2025-08-17 20:01:34,505 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:01:00.867545-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254 - Unable to parse message: '2025-08-17T20:01:00.867545-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254' 2025-08-17 20:01:34,505 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:01:00.867545-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254 - not enough values to unpack (expected 5, got 4) 2025-08-17 20:01:34,506 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:01:01.107637-05:00 homelab NetworkManager[1152]: [1755478861.1073] ndisc[0x649e9873a2d0,"enp0s31f6"]: solicit: failure sending router solicitation: Address family not supported by protocol (97) - Unable to parse message: '2025-08-17T20:01:01.107637-05:00 homelab NetworkManager[1152]: [1755478861.1073] ndisc[0x649e9873a2d0,"enp0s31f6"]: solicit: failure sending router solicitation: Address family not supported by protocol (97)' 2025-08-17 20:01:34,506 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:01:01.107637-05:00 homelab NetworkManager[1152]: [1755478861.1073] ndisc[0x649e9873a2d0,"enp0s31f6"]: solicit: failure sending router solicitation: Address family not supported by protocol (97) - not enough values to unpack (expected 5, got 4) 2025-08-17 20:01:34,506 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:01:06.244123-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:01:06.243Z"} - Unable to parse message: '2025-08-17T20:01:06.244123-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:01:06.243Z"}' 2025-08-17 20:01:34,506 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:01:06.244123-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:01:06.243Z"} - not enough values to unpack (expected 5, got 4) 2025-08-17 20:01:34,506 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:01:09.402865-05:00 homelab systemd[1]: Started session-1048.scope - Session 1048 of User artanis. - Unable to parse message: '2025-08-17T20:01:09.402865-05:00 homelab systemd[1]: Started session-1048.scope - Session 1048 of User artanis.' 2025-08-17 20:01:34,506 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:01:09.402865-05:00 homelab systemd[1]: Started session-1048.scope - Session 1048 of User artanis. - not enough values to unpack (expected 5, got 4) 2025-08-17 20:01:34,506 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:01:16.247916-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:01:16.247Z"} - Unable to parse message: '2025-08-17T20:01:16.247916-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:01:16.247Z"}' 2025-08-17 20:01:34,506 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:01:16.247916-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:01:16.247Z"} - not enough values to unpack (expected 5, got 4) 2025-08-17 20:01:34,506 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:01:26.252667-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:01:26.252Z"} - Unable to parse message: '2025-08-17T20:01:26.252667-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:01:26.252Z"}' 2025-08-17 20:01:34,506 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:01:26.252667-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:01:26.252Z"} - not enough values to unpack (expected 5, got 4) 2025-08-17 20:01:34,506 - INFO - System Logs: [{'raw_log': '2025-08-17T20:00:57.107829-05:00 homelab NetworkManager[1152]: [1755478857.1075] ndisc[0x649e9873a2d0,"enp0s31f6"]: solicit: failure sending router solicitation: Address family not supported by protocol (97)', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:01:00.867288-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:01:00.867480-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:01:00.867518-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:01:00.867545-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:01:01.107637-05:00 homelab NetworkManager[1152]: [1755478861.1073] ndisc[0x649e9873a2d0,"enp0s31f6"]: solicit: failure sending router solicitation: Address family not supported by protocol (97)', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:01:06.244123-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:01:06.243Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:01:09.402865-05:00 homelab systemd[1]: Started session-1048.scope - Session 1048 of User artanis.', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:01:16.247916-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:01:16.247Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:01:26.252667-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:01:26.252Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}] 2025-08-17 20:01:36,533 - DEBUG - Raw ping output: PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. 64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=21.0 ms 64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=23.1 ms 64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=22.8 ms --- 8.8.8.8 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2002ms rtt min/avg/max/mdev = 20.995/22.285/23.093/0.922 ms 2025-08-17 20:01:36,534 - INFO - Network Metrics: {'packet_loss_percent': 0.0, 'round_trip_ms_min': 20.995, 'round_trip_ms_avg': 22.285, 'round_trip_ms_max': 23.093, 'raw_ping_output': 'PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=21.0 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=23.1 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=22.8 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2002ms\nrtt min/avg/max/mdev = 20.995/22.285/23.093/0.922 ms\n'} 2025-08-17 20:01:36,534 - INFO - Combined Data: { "system_logs": [ { "raw_log": "2025-08-17T20:00:57.107829-05:00 homelab NetworkManager[1152]: [1755478857.1075] ndisc[0x649e9873a2d0,\"enp0s31f6\"]: solicit: failure sending router solicitation: Address family not supported by protocol (97)", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:01:00.867288-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:01:00.867480-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:01:00.867518-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:01:00.867545-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:01:01.107637-05:00 homelab NetworkManager[1152]: [1755478861.1073] ndisc[0x649e9873a2d0,\"enp0s31f6\"]: solicit: failure sending router solicitation: Address family not supported by protocol (97)", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:01:06.244123-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-18T01:01:06.243Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:01:09.402865-05:00 homelab systemd[1]: Started session-1048.scope - Session 1048 of User artanis.", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:01:16.247916-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-18T01:01:16.247Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:01:26.252667-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-18T01:01:26.252Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" } ], "network_metrics": { "packet_loss_percent": 0.0, "round_trip_ms_min": 20.995, "round_trip_ms_avg": 22.285, "round_trip_ms_max": 23.093, "raw_ping_output": "PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=21.0 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=23.1 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=22.8 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2002ms\nrtt min/avg/max/mdev = 20.995/22.285/23.093/0.922 ms\n" } } 2025-08-17 20:01:36,546 - DEBUG - connect_tcp.started host='192.168.2.114' port=11434 local_address=None timeout=None socket_options=None 2025-08-17 20:01:36,547 - DEBUG - connect_tcp.complete return_value= 2025-08-17 20:01:36,547 - DEBUG - send_request_headers.started request= 2025-08-17 20:01:36,547 - DEBUG - send_request_headers.complete 2025-08-17 20:01:36,547 - DEBUG - send_request_body.started request= 2025-08-17 20:01:36,551 - DEBUG - send_request_body.complete 2025-08-17 20:01:36,551 - DEBUG - receive_response_headers.started request= 2025-08-17 20:01:52,851 - DEBUG - receive_response_headers.complete return_value=(b'HTTP/1.1', 200, b'OK', [(b'Content-Type', b'application/json; charset=utf-8'), (b'Date', b'Mon, 18 Aug 2025 01:01:52 GMT'), (b'Transfer-Encoding', b'chunked')]) 2025-08-17 20:01:52,851 - INFO - HTTP Request: POST http://192.168.2.114:11434/api/generate "HTTP/1.1 200 OK" 2025-08-17 20:01:52,852 - DEBUG - receive_response_body.started request= 2025-08-17 20:01:52,852 - DEBUG - receive_response_body.complete 2025-08-17 20:01:52,852 - DEBUG - response_closed.started 2025-08-17 20:01:52,852 - DEBUG - response_closed.complete 2025-08-17 20:01:52,853 - INFO - LLM Response: Based on the provided system data, I have identified a concerning anomaly. The NetworkManager service has repeatedly encountered issues with sending router solicitations, resulting in warnings logged at regular intervals. This pattern of behavior is indicative of a potential configuration issue or hardware problem affecting the network interface "enp0s31f6". Given that this is a recurring error and not a minor fluctuation in RTT, I would rate its severity as **medium**. Report: A medium-severity anomaly has been detected due to repeated NetworkManager warnings about sending router solicitations on interface "enp0s31f6", potentially indicating a configuration issue or hardware problem affecting network connectivity. 2025-08-17 20:01:52,853 - INFO - Anomaly detected, sending alerts... 2025-08-17 20:01:52,855 - DEBUG - Starting new HTTPS connection (1): discord.com:443 2025-08-17 20:01:53,113 - DEBUG - https://discord.com:443 "POST /api/webhooks/1024892743987773471/3Oh1KOw9tevBd-XtUkj8Rz2K4SePCFsxKmRrHhQw5spDeZKNzoyYoq6zC2cnTKo8VjJn?wait=True HTTP/1.1" 200 None 2025-08-17 20:01:53,115 - DEBUG - Webhook executed 2025-08-17 20:01:53,115 - INFO - Discord alert sent. 2025-08-17 20:01:53,116 - DEBUG - Starting new HTTP connection (1): 192.168.2.112:8123 2025-08-17 20:01:53,162 - DEBUG - http://192.168.2.112:8123 "POST /api/services/tts/speak HTTP/1.1" 200 10 2025-08-17 20:01:53,163 - INFO - Google Home alert sent. 2025-08-17 20:01:53,163 - INFO - --- Cycle Complete, sleeping for 5 minutes --- 2025-08-17 20:06:53,163 - INFO - --- Running Monitoring Cycle --- 2025-08-17 20:06:53,169 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:06:38.789336-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.788931378Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/ - Unable to parse message: '2025-08-17T20:06:38.789336-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.788931378Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/' 2025-08-17 20:06:53,169 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:06:38.789336-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.788931378Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/ - not enough values to unpack (expected 5, got 4) 2025-08-17 20:06:53,169 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:06:38.799697-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.799623779Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/ - Unable to parse message: '2025-08-17T20:06:38.799697-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.799623779Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/' 2025-08-17 20:06:53,169 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:06:38.799697-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.799623779Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/ - not enough values to unpack (expected 5, got 4) 2025-08-17 20:06:53,169 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:06:38.802229-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.802112794Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running - Unable to parse message: '2025-08-17T20:06:38.802229-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.802112794Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running' 2025-08-17 20:06:53,169 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:06:38.802229-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.802112794Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running - not enough values to unpack (expected 5, got 4) 2025-08-17 20:06:53,169 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:06:38.802307-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.802163990Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again - Unable to parse message: '2025-08-17T20:06:38.802307-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.802163990Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again' 2025-08-17 20:06:53,170 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:06:38.802307-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.802163990Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again - not enough values to unpack (expected 5, got 4) 2025-08-17 20:06:53,170 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:06:42.646898-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254 - Unable to parse message: '2025-08-17T20:06:42.646898-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254' 2025-08-17 20:06:53,170 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:06:42.646898-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254 - not enough values to unpack (expected 5, got 4) 2025-08-17 20:06:53,170 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:06:42.647045-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254 - Unable to parse message: '2025-08-17T20:06:42.647045-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254' 2025-08-17 20:06:53,170 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:06:42.647045-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254 - not enough values to unpack (expected 5, got 4) 2025-08-17 20:06:53,171 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:06:42.647081-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254 - Unable to parse message: '2025-08-17T20:06:42.647081-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254' 2025-08-17 20:06:53,171 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:06:42.647081-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254 - not enough values to unpack (expected 5, got 4) 2025-08-17 20:06:53,171 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:06:42.647126-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254 - Unable to parse message: '2025-08-17T20:06:42.647126-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254' 2025-08-17 20:06:53,171 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:06:42.647126-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254 - not enough values to unpack (expected 5, got 4) 2025-08-17 20:06:53,171 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:06:43.107718-05:00 homelab NetworkManager[1152]: [1755479203.1074] ndisc[0x649e9873a2d0,"enp0s31f6"]: solicit: failure sending router solicitation: Address family not supported by protocol (97) - Unable to parse message: '2025-08-17T20:06:43.107718-05:00 homelab NetworkManager[1152]: [1755479203.1074] ndisc[0x649e9873a2d0,"enp0s31f6"]: solicit: failure sending router solicitation: Address family not supported by protocol (97)' 2025-08-17 20:06:53,171 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:06:43.107718-05:00 homelab NetworkManager[1152]: [1755479203.1074] ndisc[0x649e9873a2d0,"enp0s31f6"]: solicit: failure sending router solicitation: Address family not supported by protocol (97) - not enough values to unpack (expected 5, got 4) 2025-08-17 20:06:53,172 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:06:46.404426-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:06:46.404Z"} - Unable to parse message: '2025-08-17T20:06:46.404426-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:06:46.404Z"}' 2025-08-17 20:06:53,172 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:06:46.404426-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:06:46.404Z"} - not enough values to unpack (expected 5, got 4) 2025-08-17 20:06:53,172 - INFO - System Logs: [{'raw_log': '2025-08-17T20:06:38.789336-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.788931378Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:06:38.799697-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.799623779Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:06:38.802229-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.802112794Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:06:38.802307-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.802163990Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:06:42.646898-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:06:42.647045-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:06:42.647081-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:06:42.647126-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:06:43.107718-05:00 homelab NetworkManager[1152]: [1755479203.1074] ndisc[0x649e9873a2d0,"enp0s31f6"]: solicit: failure sending router solicitation: Address family not supported by protocol (97)', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:06:46.404426-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:06:46.404Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}] 2025-08-17 20:06:55,198 - DEBUG - Raw ping output: PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. 64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=134 ms 64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=22.7 ms 64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=22.3 ms --- 8.8.8.8 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2001ms rtt min/avg/max/mdev = 22.260/59.645/133.959/52.548 ms 2025-08-17 20:06:55,198 - INFO - Network Metrics: {'packet_loss_percent': 0.0, 'round_trip_ms_min': 22.26, 'round_trip_ms_avg': 59.645, 'round_trip_ms_max': 133.959, 'raw_ping_output': 'PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=134 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=22.7 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=22.3 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2001ms\nrtt min/avg/max/mdev = 22.260/59.645/133.959/52.548 ms\n'} 2025-08-17 20:06:55,198 - INFO - Combined Data: { "system_logs": [ { "raw_log": "2025-08-17T20:06:38.789336-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.788931378Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:06:38.799697-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.799623779Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:06:38.802229-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.802112794Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:06:38.802307-05:00 homelab systembridge[1156]: 2025-08-18T01:06:38.802163990Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:06:42.646898-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:06:42.647045-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:06:42.647081-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:06:42.647126-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:06:43.107718-05:00 homelab NetworkManager[1152]: [1755479203.1074] ndisc[0x649e9873a2d0,\"enp0s31f6\"]: solicit: failure sending router solicitation: Address family not supported by protocol (97)", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:06:46.404426-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-18T01:06:46.404Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" } ], "network_metrics": { "packet_loss_percent": 0.0, "round_trip_ms_min": 22.26, "round_trip_ms_avg": 59.645, "round_trip_ms_max": 133.959, "raw_ping_output": "PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=134 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=22.7 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=22.3 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2001ms\nrtt min/avg/max/mdev = 22.260/59.645/133.959/52.548 ms\n" } } 2025-08-17 20:06:55,210 - DEBUG - connect_tcp.started host='192.168.2.114' port=11434 local_address=None timeout=None socket_options=None 2025-08-17 20:06:55,211 - DEBUG - connect_tcp.complete return_value= 2025-08-17 20:06:55,211 - DEBUG - send_request_headers.started request= 2025-08-17 20:06:55,211 - DEBUG - send_request_headers.complete 2025-08-17 20:06:55,212 - DEBUG - send_request_body.started request= 2025-08-17 20:06:55,212 - DEBUG - send_request_body.complete 2025-08-17 20:06:55,212 - DEBUG - receive_response_headers.started request= 2025-08-17 20:07:18,364 - DEBUG - receive_response_headers.complete return_value=(b'HTTP/1.1', 200, b'OK', [(b'Content-Type', b'application/json; charset=utf-8'), (b'Date', b'Mon, 18 Aug 2025 01:07:18 GMT'), (b'Transfer-Encoding', b'chunked')]) 2025-08-17 20:07:18,364 - INFO - HTTP Request: POST http://192.168.2.114:11434/api/generate "HTTP/1.1 200 OK" 2025-08-17 20:07:18,366 - DEBUG - receive_response_body.started request= 2025-08-17 20:07:18,367 - DEBUG - receive_response_body.complete 2025-08-17 20:07:18,367 - DEBUG - response_closed.started 2025-08-17 20:07:18,367 - DEBUG - response_closed.complete 2025-08-17 20:07:18,368 - INFO - LLM Response: Based on the provided system data, I have identified an anomaly that warrants attention. **Anomaly Report:** A parsing error in one of the system logs indicates potential issues with regex patterns used for log processing. The error message "Fallback regex failed: not enough values to unpack (expected 5, got 4)" is repeated across several log entries from different processes, including `systembridge` and `tailscaled`. This could indicate a configuration issue or a problem with the regex pattern itself. I classify this anomaly as **medium severity** because it may impact log processing and analysis, potentially leading to missed security events or system issues. OK 2025-08-17 20:07:18,369 - INFO - Anomaly detected, sending alerts... 2025-08-17 20:07:18,370 - DEBUG - Starting new HTTPS connection (1): discord.com:443 2025-08-17 20:07:18,571 - DEBUG - https://discord.com:443 "POST /api/webhooks/1024892743987773471/3Oh1KOw9tevBd-XtUkj8Rz2K4SePCFsxKmRrHhQw5spDeZKNzoyYoq6zC2cnTKo8VjJn?wait=True HTTP/1.1" 200 None 2025-08-17 20:07:18,572 - DEBUG - Webhook executed 2025-08-17 20:07:18,572 - INFO - Discord alert sent. 2025-08-17 20:07:18,573 - DEBUG - Starting new HTTP connection (1): 192.168.2.112:8123 2025-08-17 20:07:18,581 - DEBUG - http://192.168.2.112:8123 "POST /api/services/tts/speak HTTP/1.1" 200 10 2025-08-17 20:07:18,582 - INFO - Google Home alert sent. 2025-08-17 20:07:18,582 - INFO - --- Cycle Complete, sleeping for 5 minutes --- 2025-08-17 20:12:18,582 - INFO - --- Running Monitoring Cycle --- 2025-08-17 20:12:18,588 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:11:38.855333-05:00 homelab tailscaled[1158]: magicsock: derp-16 connected; connGen=1 - Unable to parse message: '2025-08-17T20:11:38.855333-05:00 homelab tailscaled[1158]: magicsock: derp-16 connected; connGen=1' 2025-08-17 20:12:18,588 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:11:38.855333-05:00 homelab tailscaled[1158]: magicsock: derp-16 connected; connGen=1 - not enough values to unpack (expected 5, got 4) 2025-08-17 20:12:18,588 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:11:42.466298-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254 - Unable to parse message: '2025-08-17T20:11:42.466298-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254' 2025-08-17 20:12:18,589 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:11:42.466298-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254 - not enough values to unpack (expected 5, got 4) 2025-08-17 20:12:18,589 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:11:42.466456-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254 - Unable to parse message: '2025-08-17T20:11:42.466456-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254' 2025-08-17 20:12:18,589 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:11:42.466456-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254 - not enough values to unpack (expected 5, got 4) 2025-08-17 20:12:18,589 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:11:42.466501-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254 - Unable to parse message: '2025-08-17T20:11:42.466501-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254' 2025-08-17 20:12:18,589 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:11:42.466501-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254 - not enough values to unpack (expected 5, got 4) 2025-08-17 20:12:18,589 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:11:42.466528-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254 - Unable to parse message: '2025-08-17T20:11:42.466528-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254' 2025-08-17 20:12:18,589 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:11:42.466528-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254 - not enough values to unpack (expected 5, got 4) 2025-08-17 20:12:18,589 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:11:43.107823-05:00 homelab NetworkManager[1152]: [1755479503.1075] ndisc[0x649e9873a2d0,"enp0s31f6"]: solicit: failure sending router solicitation: Address family not supported by protocol (97) - Unable to parse message: '2025-08-17T20:11:43.107823-05:00 homelab NetworkManager[1152]: [1755479503.1075] ndisc[0x649e9873a2d0,"enp0s31f6"]: solicit: failure sending router solicitation: Address family not supported by protocol (97)' 2025-08-17 20:12:18,589 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:11:43.107823-05:00 homelab NetworkManager[1152]: [1755479503.1075] ndisc[0x649e9873a2d0,"enp0s31f6"]: solicit: failure sending router solicitation: Address family not supported by protocol (97) - not enough values to unpack (expected 5, got 4) 2025-08-17 20:12:18,589 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:11:46.551210-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:11:46.550Z"} - Unable to parse message: '2025-08-17T20:11:46.551210-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:11:46.550Z"}' 2025-08-17 20:12:18,590 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:11:46.551210-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:11:46.550Z"} - not enough values to unpack (expected 5, got 4) 2025-08-17 20:12:18,590 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:11:56.552618-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:11:56.552Z"} - Unable to parse message: '2025-08-17T20:11:56.552618-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:11:56.552Z"}' 2025-08-17 20:12:18,590 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:11:56.552618-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:11:56.552Z"} - not enough values to unpack (expected 5, got 4) 2025-08-17 20:12:18,590 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:12:06.556083-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:12:06.555Z"} - Unable to parse message: '2025-08-17T20:12:06.556083-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:12:06.555Z"}' 2025-08-17 20:12:18,590 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:12:06.556083-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:12:06.555Z"} - not enough values to unpack (expected 5, got 4) 2025-08-17 20:12:18,590 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:12:16.559418-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:12:16.558Z"} - Unable to parse message: '2025-08-17T20:12:16.559418-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:12:16.558Z"}' 2025-08-17 20:12:18,590 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:12:16.559418-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:12:16.558Z"} - not enough values to unpack (expected 5, got 4) 2025-08-17 20:12:18,590 - INFO - System Logs: [{'raw_log': '2025-08-17T20:11:38.855333-05:00 homelab tailscaled[1158]: magicsock: derp-16 connected; connGen=1', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:11:42.466298-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:11:42.466456-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:11:42.466501-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:11:42.466528-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:11:43.107823-05:00 homelab NetworkManager[1152]: [1755479503.1075] ndisc[0x649e9873a2d0,"enp0s31f6"]: solicit: failure sending router solicitation: Address family not supported by protocol (97)', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:11:46.551210-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:11:46.550Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:11:56.552618-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:11:56.552Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:12:06.556083-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:12:06.555Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:12:16.559418-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:12:16.558Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}] 2025-08-17 20:12:20,613 - DEBUG - Raw ping output: PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. 64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=19.2 ms 64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=20.2 ms 64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=18.8 ms --- 8.8.8.8 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2002ms rtt min/avg/max/mdev = 18.809/19.393/20.202/0.590 ms 2025-08-17 20:12:20,613 - INFO - Network Metrics: {'packet_loss_percent': 0.0, 'round_trip_ms_min': 18.809, 'round_trip_ms_avg': 19.393, 'round_trip_ms_max': 20.202, 'raw_ping_output': 'PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=19.2 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=20.2 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=18.8 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2002ms\nrtt min/avg/max/mdev = 18.809/19.393/20.202/0.590 ms\n'} 2025-08-17 20:12:20,613 - INFO - Combined Data: { "system_logs": [ { "raw_log": "2025-08-17T20:11:38.855333-05:00 homelab tailscaled[1158]: magicsock: derp-16 connected; connGen=1", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:11:42.466298-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:11:42.466456-05:00 homelab tailscaled[1158]: monitor: RTM_DELROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:11:42.466501-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fdc1:b385:9b5a:e419::/64, gw=, outif=2, table=254", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:11:42.466528-05:00 homelab tailscaled[1158]: monitor: RTM_NEWROUTE: src=, dst=fd11:e80c:3fef:1::/64, gw=fe80::182:f72:e8e5:96cb, outif=2, table=254", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:11:43.107823-05:00 homelab NetworkManager[1152]: [1755479503.1075] ndisc[0x649e9873a2d0,\"enp0s31f6\"]: solicit: failure sending router solicitation: Address family not supported by protocol (97)", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:11:46.551210-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-18T01:11:46.550Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:11:56.552618-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-18T01:11:56.552Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:12:06.556083-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-18T01:12:06.555Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:12:16.559418-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-18T01:12:16.558Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" } ], "network_metrics": { "packet_loss_percent": 0.0, "round_trip_ms_min": 18.809, "round_trip_ms_avg": 19.393, "round_trip_ms_max": 20.202, "raw_ping_output": "PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=19.2 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=20.2 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=18.8 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2002ms\nrtt min/avg/max/mdev = 18.809/19.393/20.202/0.590 ms\n" } } 2025-08-17 20:12:20,626 - DEBUG - connect_tcp.started host='192.168.2.114' port=11434 local_address=None timeout=None socket_options=None 2025-08-17 20:12:20,626 - DEBUG - connect_tcp.complete return_value= 2025-08-17 20:12:20,626 - DEBUG - send_request_headers.started request= 2025-08-17 20:12:20,627 - DEBUG - send_request_headers.complete 2025-08-17 20:12:20,627 - DEBUG - send_request_body.started request= 2025-08-17 20:12:20,627 - DEBUG - send_request_body.complete 2025-08-17 20:12:20,627 - DEBUG - receive_response_headers.started request= 2025-08-17 20:12:42,969 - DEBUG - receive_response_headers.complete return_value=(b'HTTP/1.1', 200, b'OK', [(b'Content-Type', b'application/json; charset=utf-8'), (b'Date', b'Mon, 18 Aug 2025 01:12:42 GMT'), (b'Transfer-Encoding', b'chunked')]) 2025-08-17 20:12:42,969 - INFO - HTTP Request: POST http://192.168.2.114:11434/api/generate "HTTP/1.1 200 OK" 2025-08-17 20:12:42,969 - DEBUG - receive_response_body.started request= 2025-08-17 20:12:42,970 - DEBUG - receive_response_body.complete 2025-08-17 20:12:42,970 - DEBUG - response_closed.started 2025-08-17 20:12:42,970 - DEBUG - response_closed.complete 2025-08-17 20:12:42,970 - INFO - LLM Response: After analyzing the system data, I have identified a concerning anomaly. There are multiple instances of parsing errors in the system logs due to insufficient values being unpacked by regular expressions (regex). This indicates a potential issue with the log parsing mechanism, which may be caused by an outdated or incorrectly configured regex pattern. The severity of this anomaly is medium, as it could potentially lead to incomplete or inaccurate logging, making it difficult to detect and respond to security incidents or system issues. Here's a more specific breakdown: - Multiple occurrences of parsing errors in the system logs (5 instances). - Errors are consistently caused by insufficient values being unpacked by regular expressions. - This issue does not appear to be directly related to security or connectivity loss, but could potentially impact logging accuracy and reliability. 2025-08-17 20:12:42,970 - INFO - Anomaly detected, sending alerts... 2025-08-17 20:12:42,971 - DEBUG - Starting new HTTPS connection (1): discord.com:443 2025-08-17 20:12:43,187 - DEBUG - https://discord.com:443 "POST /api/webhooks/1024892743987773471/3Oh1KOw9tevBd-XtUkj8Rz2K4SePCFsxKmRrHhQw5spDeZKNzoyYoq6zC2cnTKo8VjJn?wait=True HTTP/1.1" 200 None 2025-08-17 20:12:43,188 - DEBUG - Webhook executed 2025-08-17 20:12:43,188 - INFO - Discord alert sent. 2025-08-17 20:12:43,189 - DEBUG - Starting new HTTP connection (1): 192.168.2.112:8123 2025-08-17 20:12:43,212 - DEBUG - http://192.168.2.112:8123 "POST /api/services/tts/speak HTTP/1.1" 200 10 2025-08-17 20:12:43,212 - INFO - Google Home alert sent. 2025-08-17 20:12:43,212 - INFO - --- Cycle Complete, sleeping for 5 minutes --- 2025-08-17 20:17:43,213 - INFO - --- Running Monitoring Cycle --- 2025-08-17 20:17:43,218 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:17:06.690947-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:17:06.690Z"} - Unable to parse message: '2025-08-17T20:17:06.690947-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:17:06.690Z"}' 2025-08-17 20:17:43,219 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:17:06.690947-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:17:06.690Z"} - not enough values to unpack (expected 5, got 4) 2025-08-17 20:17:43,219 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:17:16.695900-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:17:16.695Z"} - Unable to parse message: '2025-08-17T20:17:16.695900-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:17:16.695Z"}' 2025-08-17 20:17:43,219 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:17:16.695900-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:17:16.695Z"} - not enough values to unpack (expected 5, got 4) 2025-08-17 20:17:43,219 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:17:26.700906-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:17:26.700Z"} - Unable to parse message: '2025-08-17T20:17:26.700906-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:17:26.700Z"}' 2025-08-17 20:17:43,219 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:17:26.700906-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:17:26.700Z"} - not enough values to unpack (expected 5, got 4) 2025-08-17 20:17:43,220 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:17:36.704948-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:17:36.704Z"} - Unable to parse message: '2025-08-17T20:17:36.704948-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:17:36.704Z"}' 2025-08-17 20:17:43,220 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:17:36.704948-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:17:36.704Z"} - not enough values to unpack (expected 5, got 4) 2025-08-17 20:17:43,220 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:17:38.789532-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.789122897Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server.. - Unable to parse message: '2025-08-17T20:17:38.789532-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.789122897Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..' 2025-08-17 20:17:43,220 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:17:38.789532-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.789122897Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server.. - not enough values to unpack (expected 5, got 4) 2025-08-17 20:17:43,221 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:17:38.789711-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.789178372Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001 - Unable to parse message: '2025-08-17T20:17:38.789711-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.789178372Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001' 2025-08-17 20:17:43,221 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:17:38.789711-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.789178372Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001 - not enough values to unpack (expected 5, got 4) 2025-08-17 20:17:43,222 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:17:38.789772-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.789224412Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/ - Unable to parse message: '2025-08-17T20:17:38.789772-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.789224412Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/' 2025-08-17 20:17:43,222 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:17:38.789772-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.789224412Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/ - not enough values to unpack (expected 5, got 4) 2025-08-17 20:17:43,222 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:17:38.800165-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.800021193Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/ - Unable to parse message: '2025-08-17T20:17:38.800165-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.800021193Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/' 2025-08-17 20:17:43,222 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:17:38.800165-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.800021193Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/ - not enough values to unpack (expected 5, got 4) 2025-08-17 20:17:43,223 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:17:38.802388-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.802316033Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running - Unable to parse message: '2025-08-17T20:17:38.802388-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.802316033Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running' 2025-08-17 20:17:43,223 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:17:38.802388-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.802316033Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running - not enough values to unpack (expected 5, got 4) 2025-08-17 20:17:43,223 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:17:38.802486-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.802360419Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again - Unable to parse message: '2025-08-17T20:17:38.802486-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.802360419Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again' 2025-08-17 20:17:43,223 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:17:38.802486-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.802360419Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again - not enough values to unpack (expected 5, got 4) 2025-08-17 20:17:43,224 - INFO - System Logs: [{'raw_log': '2025-08-17T20:17:06.690947-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:17:06.690Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:17:16.695900-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:17:16.695Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:17:26.700906-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:17:26.700Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:17:36.704948-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:17:36.704Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:17:38.789532-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.789122897Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:17:38.789711-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.789178372Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:17:38.789772-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.789224412Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:17:38.800165-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.800021193Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:17:38.802388-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.802316033Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:17:38.802486-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.802360419Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}] 2025-08-17 20:17:45,256 - DEBUG - Raw ping output: PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. 64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=31.4 ms 64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=24.7 ms 64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=27.6 ms --- 8.8.8.8 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2003ms rtt min/avg/max/mdev = 24.704/27.899/31.407/2.745 ms 2025-08-17 20:17:45,256 - INFO - Network Metrics: {'packet_loss_percent': 0.0, 'round_trip_ms_min': 24.704, 'round_trip_ms_avg': 27.899, 'round_trip_ms_max': 31.407, 'raw_ping_output': 'PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=31.4 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=24.7 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=27.6 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2003ms\nrtt min/avg/max/mdev = 24.704/27.899/31.407/2.745 ms\n'} 2025-08-17 20:17:45,256 - INFO - Combined Data: { "system_logs": [ { "raw_log": "2025-08-17T20:17:06.690947-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-18T01:17:06.690Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:17:16.695900-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-18T01:17:16.695Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:17:26.700906-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-18T01:17:26.700Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:17:36.704948-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-18T01:17:36.704Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:17:38.789532-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.789122897Z #033[36mDEBUG#033[0m (11) [systembridge] Checking backend server..", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:17:38.789711-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.789178372Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:17:38.789772-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.789224412Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:17:38.800165-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.800021193Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:17:38.802388-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.802316033Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:17:38.802486-05:00 homelab systembridge[1156]: 2025-08-18T01:17:38.802360419Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" } ], "network_metrics": { "packet_loss_percent": 0.0, "round_trip_ms_min": 24.704, "round_trip_ms_avg": 27.899, "round_trip_ms_max": 31.407, "raw_ping_output": "PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=31.4 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=24.7 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=27.6 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2003ms\nrtt min/avg/max/mdev = 24.704/27.899/31.407/2.745 ms\n" } } 2025-08-17 20:17:45,269 - DEBUG - connect_tcp.started host='192.168.2.114' port=11434 local_address=None timeout=None socket_options=None 2025-08-17 20:17:45,270 - DEBUG - connect_tcp.complete return_value= 2025-08-17 20:17:45,271 - DEBUG - send_request_headers.started request= 2025-08-17 20:17:45,271 - DEBUG - send_request_headers.complete 2025-08-17 20:17:45,271 - DEBUG - send_request_body.started request= 2025-08-17 20:17:45,275 - DEBUG - send_request_body.complete 2025-08-17 20:17:45,275 - DEBUG - receive_response_headers.started request= 2025-08-17 20:18:07,454 - DEBUG - receive_response_headers.complete return_value=(b'HTTP/1.1', 200, b'OK', [(b'Content-Type', b'application/json; charset=utf-8'), (b'Date', b'Mon, 18 Aug 2025 01:18:07 GMT'), (b'Transfer-Encoding', b'chunked')]) 2025-08-17 20:18:07,455 - INFO - HTTP Request: POST http://192.168.2.114:11434/api/generate "HTTP/1.1 200 OK" 2025-08-17 20:18:07,455 - DEBUG - receive_response_body.started request= 2025-08-17 20:18:07,455 - DEBUG - receive_response_body.complete 2025-08-17 20:18:07,455 - DEBUG - response_closed.started 2025-08-17 20:18:07,455 - DEBUG - response_closed.complete 2025-08-17 20:18:07,456 - INFO - LLM Response: After analyzing the system and network data, I have found a concerning anomaly. The system logs indicate a parsing error in multiple logs from the `systembridge` process, specifically "Fallback regex failed: not enough values to unpack (expected 5, got 4)" for each log entry. This suggests that there may be an issue with the logging configuration or a bug in the code processing these logs. The severity of this anomaly is medium as it indicates a potential issue with data collection and parsing, which could impact system monitoring and troubleshooting. Additionally, I would like to note that while the network metrics appear normal, it's essential to continue monitoring the system for any changes or updates that might reveal further issues. 2025-08-17 20:18:07,456 - INFO - Anomaly detected, sending alerts... 2025-08-17 20:18:07,457 - DEBUG - Starting new HTTPS connection (1): discord.com:443 2025-08-17 20:18:07,664 - DEBUG - https://discord.com:443 "POST /api/webhooks/1024892743987773471/3Oh1KOw9tevBd-XtUkj8Rz2K4SePCFsxKmRrHhQw5spDeZKNzoyYoq6zC2cnTKo8VjJn?wait=True HTTP/1.1" 200 None 2025-08-17 20:18:07,665 - DEBUG - Webhook executed 2025-08-17 20:18:07,665 - INFO - Discord alert sent. 2025-08-17 20:18:07,666 - DEBUG - Starting new HTTP connection (1): 192.168.2.112:8123 2025-08-17 20:18:07,673 - DEBUG - http://192.168.2.112:8123 "POST /api/services/tts/speak HTTP/1.1" 200 10 2025-08-17 20:18:07,673 - INFO - Google Home alert sent. 2025-08-17 20:18:07,674 - INFO - --- Cycle Complete, sleeping for 5 minutes --- 2025-08-17 20:23:07,674 - INFO - --- Running Monitoring Cycle --- 2025-08-17 20:23:07,680 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:22:38.789409-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.788961205Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001 - Unable to parse message: '2025-08-17T20:22:38.789409-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.788961205Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001' 2025-08-17 20:23:07,680 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:22:38.789409-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.788961205Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001 - not enough values to unpack (expected 5, got 4) 2025-08-17 20:23:07,680 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:22:38.789442-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.789006559Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/ - Unable to parse message: '2025-08-17T20:22:38.789442-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.789006559Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/' 2025-08-17 20:23:07,680 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:22:38.789442-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.789006559Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/ - not enough values to unpack (expected 5, got 4) 2025-08-17 20:23:07,680 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:22:38.799777-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.799702684Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/ - Unable to parse message: '2025-08-17T20:22:38.799777-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.799702684Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/' 2025-08-17 20:23:07,680 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:22:38.799777-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.799702684Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/ - not enough values to unpack (expected 5, got 4) 2025-08-17 20:23:07,680 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:22:38.802306-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.802235475Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running - Unable to parse message: '2025-08-17T20:22:38.802306-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.802235475Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running' 2025-08-17 20:23:07,681 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:22:38.802306-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.802235475Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running - not enough values to unpack (expected 5, got 4) 2025-08-17 20:23:07,681 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:22:38.802393-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.802282347Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again - Unable to parse message: '2025-08-17T20:22:38.802393-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.802282347Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again' 2025-08-17 20:23:07,681 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:22:38.802393-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.802282347Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again - not enough values to unpack (expected 5, got 4) 2025-08-17 20:23:07,681 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:22:42.153643-05:00 homelab systemd[1]: motd-news.service: Deactivated successfully. - Unable to parse message: '2025-08-17T20:22:42.153643-05:00 homelab systemd[1]: motd-news.service: Deactivated successfully.' 2025-08-17 20:23:07,681 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:22:42.153643-05:00 homelab systemd[1]: motd-news.service: Deactivated successfully. - not enough values to unpack (expected 5, got 4) 2025-08-17 20:23:07,681 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:22:42.153795-05:00 homelab systemd[1]: Finished motd-news.service - Message of the Day. - Unable to parse message: '2025-08-17T20:22:42.153795-05:00 homelab systemd[1]: Finished motd-news.service - Message of the Day.' 2025-08-17 20:23:07,681 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:22:42.153795-05:00 homelab systemd[1]: Finished motd-news.service - Message of the Day. - not enough values to unpack (expected 5, got 4) 2025-08-17 20:23:07,681 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:22:46.842670-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:22:46.842Z"} - Unable to parse message: '2025-08-17T20:22:46.842670-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:22:46.842Z"}' 2025-08-17 20:23:07,681 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:22:46.842670-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:22:46.842Z"} - not enough values to unpack (expected 5, got 4) 2025-08-17 20:23:07,681 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:22:56.848015-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:22:56.846Z"} - Unable to parse message: '2025-08-17T20:22:56.848015-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:22:56.846Z"}' 2025-08-17 20:23:07,681 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:22:56.848015-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:22:56.846Z"} - not enough values to unpack (expected 5, got 4) 2025-08-17 20:23:07,681 - DEBUG - RFC5424 parsing failed for: 2025-08-17T20:23:06.852047-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:23:06.851Z"} - Unable to parse message: '2025-08-17T20:23:06.852047-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:23:06.851Z"}' 2025-08-17 20:23:07,682 - WARNING - Fallback regex parsing failed for: 2025-08-17T20:23:06.852047-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:23:06.851Z"} - not enough values to unpack (expected 5, got 4) 2025-08-17 20:23:07,682 - INFO - System Logs: [{'raw_log': '2025-08-17T20:22:38.789409-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.788961205Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:22:38.789442-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.789006559Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:22:38.799777-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.799702684Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:22:38.802306-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.802235475Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:22:38.802393-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.802282347Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:22:42.153643-05:00 homelab systemd[1]: motd-news.service: Deactivated successfully.', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:22:42.153795-05:00 homelab systemd[1]: Finished motd-news.service - Message of the Day.', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:22:46.842670-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:22:46.842Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:22:56.848015-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:22:56.846Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}, {'raw_log': '2025-08-17T20:23:06.852047-05:00 homelab node[1831764]: info: Running polling check... {"timestamp":"2025-08-18T01:23:06.851Z"}', 'parsing_error': 'Fallback regex failed: not enough values to unpack (expected 5, got 4)'}] 2025-08-17 20:23:09,719 - DEBUG - Raw ping output: PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. 64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=21.6 ms 64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=136 ms 64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=32.2 ms --- 8.8.8.8 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2003ms rtt min/avg/max/mdev = 21.627/63.318/136.160/51.686 ms 2025-08-17 20:23:09,719 - INFO - Network Metrics: {'packet_loss_percent': 0.0, 'round_trip_ms_min': 21.627, 'round_trip_ms_avg': 63.318, 'round_trip_ms_max': 136.16, 'raw_ping_output': 'PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=21.6 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=136 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=32.2 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2003ms\nrtt min/avg/max/mdev = 21.627/63.318/136.160/51.686 ms\n'} 2025-08-17 20:23:09,719 - INFO - Combined Data: { "system_logs": [ { "raw_log": "2025-08-17T20:22:38.789409-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.788961205Z #033[36mDEBUG#033[0m (11) [systembridge::shared] Data path: /home/artanis/.local/share/timmo001", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:22:38.789442-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.789006559Z #033[32mINFO#033[0m (11) [systembridge::backend] Checking backend server: http://127.0.0.1:9170/", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:22:38.799777-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.799702684Z #033[36mDEBUG#033[0m (11) [reqwest::connect] starting new connection: http://127.0.0.1:9170/", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:22:38.802306-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.802235475Z #033[32mINFO#033[0m (11) [systembridge::backend] Backend server is already running", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:22:38.802393-05:00 homelab systembridge[1156]: 2025-08-18T01:22:38.802282347Z #033[32mINFO#033[0m (11) [systembridge] Waiting for 60 seconds before checking the backend server again", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:22:42.153643-05:00 homelab systemd[1]: motd-news.service: Deactivated successfully.", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:22:42.153795-05:00 homelab systemd[1]: Finished motd-news.service - Message of the Day.", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:22:46.842670-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-18T01:22:46.842Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:22:56.848015-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-18T01:22:56.846Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" }, { "raw_log": "2025-08-17T20:23:06.852047-05:00 homelab node[1831764]: info: Running polling check... {\"timestamp\":\"2025-08-18T01:23:06.851Z\"}", "parsing_error": "Fallback regex failed: not enough values to unpack (expected 5, got 4)" } ], "network_metrics": { "packet_loss_percent": 0.0, "round_trip_ms_min": 21.627, "round_trip_ms_avg": 63.318, "round_trip_ms_max": 136.16, "raw_ping_output": "PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.\n64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=21.6 ms\n64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=136 ms\n64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=32.2 ms\n\n--- 8.8.8.8 ping statistics ---\n3 packets transmitted, 3 received, 0% packet loss, time 2003ms\nrtt min/avg/max/mdev = 21.627/63.318/136.160/51.686 ms\n" } } 2025-08-17 20:23:09,732 - DEBUG - connect_tcp.started host='192.168.2.114' port=11434 local_address=None timeout=None socket_options=None 2025-08-17 20:23:09,733 - DEBUG - connect_tcp.complete return_value= 2025-08-17 20:23:09,733 - DEBUG - send_request_headers.started request= 2025-08-17 20:23:09,733 - DEBUG - send_request_headers.complete 2025-08-17 20:23:09,733 - DEBUG - send_request_body.started request= 2025-08-17 20:23:09,733 - DEBUG - send_request_body.complete 2025-08-17 20:23:09,733 - DEBUG - receive_response_headers.started request= 2025-08-17 20:23:32,253 - DEBUG - receive_response_headers.complete return_value=(b'HTTP/1.1', 200, b'OK', [(b'Content-Type', b'application/json; charset=utf-8'), (b'Date', b'Mon, 18 Aug 2025 01:23:32 GMT'), (b'Transfer-Encoding', b'chunked')]) 2025-08-17 20:23:32,254 - INFO - HTTP Request: POST http://192.168.2.114:11434/api/generate "HTTP/1.1 200 OK" 2025-08-17 20:23:32,254 - DEBUG - receive_response_body.started request= 2025-08-17 20:23:32,254 - DEBUG - receive_response_body.complete 2025-08-17 20:23:32,254 - DEBUG - response_closed.started 2025-08-17 20:23:32,254 - DEBUG - response_closed.complete 2025-08-17 20:23:32,255 - INFO - LLM Response: After analyzing the system data, I have found no *concerning* anomalies that indicate potential security intrusions, loss of connections, or unexpected network additions. The provided logs seem to be related to normal system and network operations, with some minor parsing errors in the log processing. However, upon closer inspection, I did notice a few events that might be considered worthy of further investigation: - "Fallback regex failed: not enough values to unpack (expected 5, got 4)" appears multiple times throughout the logs. While these errors are likely due to normal system operations or configuration issues rather than malicious activity, they may warrant further inspection. Considering these findings, I do not have a reportable anomaly but suggest investigating the parsing errors for any underlying causes or corrections that could improve system stability and logging quality. 2025-08-17 20:23:32,255 - INFO - Anomaly detected, sending alerts... 2025-08-17 20:23:32,256 - DEBUG - Starting new HTTPS connection (1): discord.com:443 2025-08-17 20:23:32,678 - DEBUG - https://discord.com:443 "POST /api/webhooks/1024892743987773471/3Oh1KOw9tevBd-XtUkj8Rz2K4SePCFsxKmRrHhQw5spDeZKNzoyYoq6zC2cnTKo8VjJn?wait=True HTTP/1.1" 200 None 2025-08-17 20:23:32,679 - DEBUG - Webhook executed 2025-08-17 20:23:32,679 - INFO - Discord alert sent. 2025-08-17 20:23:32,680 - DEBUG - Starting new HTTP connection (1): 192.168.2.112:8123 2025-08-17 20:23:32,686 - DEBUG - http://192.168.2.112:8123 "POST /api/services/tts/speak HTTP/1.1" 200 10 2025-08-17 20:23:32,687 - INFO - Google Home alert sent. 2025-08-17 20:23:32,687 - INFO - --- Cycle Complete, sleeping for 5 minutes ---