Ollama Abnormal Service Crash Availability Attack
Detects critical service crashes, fatal errors, and abnormal process terminations in Ollama that may indicate exploitation attempts, resource exhaustion attacks, malicious input triggering unhandled exceptions, or deliberate denial of service attacks designed to disrupt AI model availability and degrade system stability. The rule aggregates multiple termination events within a 5-minute window to identify sustained instability or attack patterns.
Splunk (SPL)
