import json


def rule(event):
    if (
        "error: buffer_get_ret: trying to get more bytes 1907 than in buffer 308 [preauth]"
        in json.dumps(event.to_dict())
    ):
        return True
    return False
