feat(ee): SIEM (#2471)

apps/server/src/core/auth/services/auth.service.ts

@@ -219,6 +219,13 @@ export class AuthService {
       subject: 'Reset your password',
       template: emailTemplate,
     });
+
+    this.auditService.log({
+      event: AuditEvent.USER_PASSWORD_RESET_REQUESTED,
+      resourceType: AuditResource.USER,
+      resourceId: user.id,
+      metadata: { source: 'forgot_password' },
+    });
   }
 
   async passwordReset(

apps/server/src/core/notification/notification.constants.ts

@@ -10,6 +10,9 @@ export const NotificationType = {
   PAGE_VERIFIED: 'page.verified',
   PAGE_APPROVAL_REQUESTED: 'page.approval_requested',
   PAGE_APPROVAL_REJECTED: 'page.approval_rejected',
+  SIEM_DESTINATION_FAILING: 'siem_destination.failing',
+  SIEM_DESTINATION_DISABLED: 'siem_destination.disabled',
+  SIEM_DESTINATION_RECOVERED: 'siem_destination.recovered',
 } as const;
 
 export type NotificationType =
@@ -40,6 +43,9 @@ export const DIRECT_NOTIFICATION_TYPES: NotificationType[] = [
   NotificationType.COMMENT_RESOLVED,
   NotificationType.PAGE_USER_MENTION,
   NotificationType.PAGE_PERMISSION_GRANTED,
+  NotificationType.SIEM_DESTINATION_FAILING,
+  NotificationType.SIEM_DESTINATION_DISABLED,
+  NotificationType.SIEM_DESTINATION_RECOVERED,
 ];
 
 export const UPDATES_NOTIFICATION_TYPES: NotificationType[] = [