Parse query id from syslog alerts

This commit is contained in:
Alfredo Cardigliano 2025-03-17 20:14:56 +01:00
parent ee2abffbb6
commit 8690becceb
6 changed files with 62 additions and 13 deletions

View file

@ -57,8 +57,13 @@ function external_alert.format(ifid, alert, alert_type_params)
return res
end
local info = alert_type_params.alerts[tostring(flow_alert_keys.flow_alert_external)]
if not info then
local info = alert_type_params
if not alert_type_params.source
and alert_type_params.alerts
and alert_type_params.alerts[tostring(flow_alert_keys.flow_alert_external)] then
info = alert_type_params.alerts[tostring(flow_alert_keys.flow_alert_external)]
else
return res
end