Refactors user_scripts into checks (lua)

scripts/plugins/alerts/security/flow_flood/checks/network/flow_flood_victim.lua

@@ -0,0 +1,53 @@
+--
+-- (C) 2019-21 - ntop.org
+--
+
+local alerts_api = require("alerts_api")
+local alert_consts = require("alert_consts")
+local checks = require("checks")
+
+local script = {
+  -- Script category
+  category = checks.script_categories.security,
+
+  default_enabled = false,
+
+  -- This script is only for alerts generation
+  is_alert = true,
+
+  default_value = {
+     operator = "gt",
+     threshold = 32768,
+  },
+
+  -- See below
+  hooks = {},
+
+  gui = {
+    i18n_title = "entity_thresholds.flow_victim_title",
+    i18n_description = "entity_thresholds.flow_victim_description",
+    i18n_field_unit = checks.field_units.flow_sec,
+    input_builder = "threshold_cross",
+    field_max = 65535,
+    field_min = 1,
+    field_operator = "gt";
+  }
+}
+
+-- #################################################################
+
+function script.hooks.min(params)
+  local value = params.entity_info["hits.flow_flood_victim"] or 0
+  local victim = nil
+
+  if value ~= 0 then
+    victim = params.alert_entity.entity_val
+  end
+
+  -- Check if the configured threshold is crossed by the value and possibly trigger an alert
+  alerts_api.checkThresholdAlert(params, alert_consts.alert_types.alert_flow_flood_victim, value, nil, victim)
+end
+
+-- #################################################################
+
+return script