vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-04-28 23:19:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Push smart filters for host alerts generated from lua

Browse source
This commit is contained in:
Alfredo Cardigliano 2023-04-24 12:28:20 +02:00
parent 7be881fdfc
commit e9f192ad04
2 changed files with 37 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

35
scripts/lua/modules/alerts_api.lua
View file

@ -11,10 +11,12 @@ package.path = dirs.installdir .. "/scripts/lua/modules/notifications/?.lua;" ..
local json = require("dkjson")
local alert_severities = require "alert_severities"
local alert_entities = require "alert_entities"
local alert_consts = require("alert_consts")
local os_utils = require("os_utils")
local recipients = require "recipients"
local pools_alert_utils = require "pools_alert_utils"
local recording_utils = require "recording_utils"
local do_trace = false
@ -149,6 +151,31 @@ end
-- ##############################################
--! @brief Push filter matching the alert to Smart Recording if enabled
--! See also Host::enqueueAlertToRecipients for alerts triggered from C++
--! @param entity_info data returned by one of the entity_info building functions
local function pushSmartRecordingFilter(entity_info, ifid)
if entity_info.alert_entity == alert_entities.host and
recording_utils.isSmartEnabled() then
local instance = recording_utils.getN2diskInstanceName(ifid)
local ip = entity_info.entity_val
if not isEmptyString(instance) and
not isEmptyString(ip) then
local filter = string.format("%s", ip)
local key = string.format("n2disk.%s.filter.host.%s", instance, filter)
local expiration = 30*60 -- 30 min
ntop.setCache(key, "1", expiration)
end
end
end
-- ##############################################
--! @param entity_info data returned by one of the entity_info building functions
--! @param type_info data returned by one of the type_info building functions
--! @param when (optional) the time when the release event occurs
@ -191,8 +218,11 @@ function alerts_api.store(entity_info, type_info, when)
}
addAlertPoolInfo(entity_info, alert_to_store)
recipients.dispatch_notification(alert_to_store, current_script)
pushSmartRecordingFilter(entity_info, ifid)
return(true)
end
@ -325,9 +355,12 @@ function alerts_api.trigger(entity_info, type_info, when, cur_alerts)
debug_print("Sending notification for alert " .. entity_info.entity_val)
addAlertPoolInfo(entity_info, triggered)
recipients.dispatch_notification(triggered, current_script)
mark_trigger_notified(triggered)
pushSmartRecordingFilter(entity_info, ifid)
else
debug_print("Alert already notified for " .. entity_info.entity_val)
end
@ -395,7 +428,9 @@ function alerts_api.release(entity_info, type_info, when, cur_alerts)
released.action = "release"
addAlertPoolInfo(entity_info, released)
mark_release_notified(released)
recipients.dispatch_notification(released, current_script)
return(true)