The scenario regularly reads logs over ssh, separates critical errors, alerts smscRu, and opens a ticket in TheHive 5 for critical ones.