🎯 Overview

This PR introduces a comprehensive detection rule for Redis troubleshooting - covering 10 critical Redis failure scenarios that commonly occur in production environments. The rule identifies multiple failure patterns including OOM errors, connection timeouts, authentication failures, and persistence issues.

CRE Playground Links

CRE-2025-0135 Playground: Playground Link

🚨 Problem Statement

High-Severity Issue: Redis issues in production cause:

• Complete inability to access cached data
• Application performance degradation and timeouts
• Data consistency risks if error handling is inadequate
• Potential cascade failures in dependent services
• Service outages when Redis becomes unresponsive

Why This Matters: Redis failures are particularly dangerous because:

• Applications heavily rely on Redis for caching and session management
• Issues often manifest as generic timeouts making diagnosis difficult
• Multiple failure modes can occur simultaneously
• Requires immediate intervention to restore service functionality

🔍 Detection Rule

Rule ID: CRE-2025-0135
Severity: critical
Category: in-memory-database-problem

Key Patterns Detected

- OOM command not allowed when used memory > 'maxmemory'
- Connection timeout.*redis|Unable to connect to Redis
- WRONGPASS invalid username-password pair
- ERR unknown command|ERR wrong number of arguments
- Background save already in progress
- Slow log.*microseconds|command.*took.*milliseconds
- READONLY You can't write against a read only replica
- MISCONF Redis is configured to save RDB snapshots
- max number of clients reached
- NOPERM User .* has no permissions to run the '.*' command

Rule Performance

• Detection Rate: 1 critical hit with 10 matching lines
• Processing Speed: 11.61K lines/s
• Coverage: All 10 Redis issue types
• False Positive Rate: Low (specific Redis error patterns)

📊 10 Redis Issues Covered

🧪 Testing & Validation

CRE Rule Testing

cd rules/cre-2025-0135
cat test.log | preq -r redis-comprehensive-troubleshooting.yaml -d

Demo Environment

🎬 Demo Repository

Complete Demo Environment: https://github.com/MAVRICK-1/redis-cre-troubleshooting-demo

./start-demo.sh
cat logs/cre-2025-0135-demo.log | preq -r cre-2025-0135/redis-comprehensive-troubleshooting.yaml -d

Demo Contents:

1. Docker Compose environment with Redis server
2. Authentic issue reproduction scripts generating real Redis errors
3. Comprehensive logging in preq-compatible format
4. CRE rule validation with live testing
5. Complete documentation with setup instructions

🎯 Production Applicability

Real-World Scenarios Detected

1. Memory Exhaustion: Redis OOM when maxmemory exceeded
2. Network Issues: Connection timeouts and connectivity problems
3. Security Failures: Authentication and ACL permission denials
4. Performance Problems: Slow queries and background save conflicts
5. Operational Issues: Read-only replicas and persistence failures

https://x.com/realamvrick/status/1960598189976821920

Fixes #132
/claim #132