Fixup rule

Author: tonymeehan

VERSION

@@ -1 +1 @@
-0.3.29
+0.3.30

rules/cre-2025-0070/loki-log-line-long.yaml renamed to rules/cre-2025-0090/loki-log-line-long.yaml

@@ -5,10 +5,10 @@ rules:
       kind: "prequel"
       version: "1.0.0"
     cre:
-      id: CRE-2025-0070
+      id: CRE-2025-0090
       title: Loki Log Line Exceeds Max Size Limit
       severity: 3
-      category: log-processing-problems
+      category: observability-problem
       author: dosmanak
       description: |
         Alloy detects the Loki is dropping log lines because they exceed the configured maximum line size.
@@ -42,7 +42,6 @@ rules:
         - alloy
         - loki
         - logs
-        - line-too-long
         - observability
         - grafana
       references:
@@ -52,7 +51,4 @@ rules:
         event:
           source: Alloy log
         match:
-          - regex: >
-              level=error msg="final error sending batch" component_path=/ component_id=loki\.write\.endpoint component=client host=.*?
-              status=400 tenant=.*? error="server returned HTTP status 400 Bad Request \(400\): Max entry size \'(\d+)\' bytes
-              exceeded for stream \'\{.*?\}\' while adding an entry with length \'(\d+)\' bytes"
+          - regex: level=error(.+)final error sending batch(.+)component_id=loki\.write\.endpoint(.+)error(.+)server returned HTTP status 400 Bad Request(.+)Max entry size(.+)exceeded for stream

rules/cre-2025-0090/test.log

@@ -0,0 +1 @@
+ts=2025-05-19T07:20:05.532795855Z level=error msg="final error sending batch" component_path=/ component_id=loki.write.endpoint component=client host=logs.sanitino.eu status=400 tenant=sanitino error="server returned HTTP status 400 Bad Request (400): Max entry size '262144' bytes exceeded for stream '{app=\"XXXXX\", container=\"XXXXXX\", filename=\"/var/log/pods/XXXXX_XXXXXX-588dc4f856-cm8t2_a5297edd-2357-40ef-9636-9c3d23d5454b/XXXXXX/1.log\", job=\"XXXXXX/XXXXXXX-588dc4f856-cm8t2\", level=\"INFO\", logger=\"ZZZZZZ\", namespace=\"XXXXXX\", pod=\"XXXXXX-588dc4f856-cm8t2\", service_name=\"XXXXXX\", stage=\"NONPROD\", stream=\"stdout\"}' while adding an entry with length '9100509' bytes"

rules/tags/tags.yaml

@@ -576,3 +576,6 @@ tags:
   - name: schema-error
     displayName: Schema Error
     description: Missing or corrupted database schema elements such as tables or columns
+  - name: logs
+    displayName: Logs
+    description: Problems with log processing