In general this evolves to a SIEM-like solution in IT or gets added to the tag menagerie in OT. If you're focused on "notifications are bad" note that notifica

In general this evolves to a SIEM-like solution in IT or gets added to the tag menagerie in OT. If you're focused on "notifications are bad" note that notifications are push, and pull solutions are possible. Tail logs (or journalctl) and post significant events to Redis (https://github.com/m3047/rkvdns_examples/tree/main/totalizers https://github.com/m3047/rkvdns_examples/tree/main/totalizer...) for example.