Implements builders for each flow status definition

[FlowsK] alert_blacklisted_country.lua

[FlowsK] alert_flow_blacklisted.lua

[FlowsK] alert_device_protocol_not_allowed.lua

[FlowsK] external_alert.lua

[FlowsK] alert_potentially_dangerous_protocol.lua

[FlowsK] tls_certificate_mismatch.lua

[FlowsK] tls_certificate_expired.lua

[FlowsK] tls_malicious_signature.lua

[FlowsK] elephant_flows.lua

[FlowsK] not_purged.lua

[FlowsK] web_mining.lua

[FlowsK] potentially_dangerous.lua

[FlowsK] alert_flow_blocked.lua

scripts/lua/modules/alert_definitions/external_alert.lua

@@ -4,8 +4,26 @@
 
 local alert_keys = require "alert_keys"
 
+-- #######################################################
+
+-- @brief Prepare an alert table used to generate the alert
+-- @param alert_severity A severity as defined in `alert_consts.alert_severities`
+-- @param info A generic table decoded from a JSON originated at the external alert source
+-- @return A table with the alert built
+local function buildExternal(alert_severity, info)
+   local built = {
+      alert_severity = alert_severity,
+      info = info
+   }
+
+   return built
+end
+
+-- #######################################################
+
 return {
   alert_key = alert_keys.ntopng.alert_external,
   i18n_title = "alerts_dashboard.external_alert",
   icon = "fas fa-eye",
+  builder = buildExternal,
 }