ntopng/scripts/lua/modules/alert_definitions/alert_threshold_cross.lua
Matteo Biscosi 507583db64
Added host category to flow and host alerts (#4767)
* Fixed shell endpoint bug and added notice when executing the script

* Added victim and attacker to security plugins

* Updated hosts alert with host_category info

* Added host category to hosts alert description

* Added host category to flows

Co-authored-by: matteo <biscosi@ntop.org>
2020-11-20 19:14:07 +01:00

36 lines
1.3 KiB
Lua

--
-- (C) 2019-20 - ntop.org
--
local json = require("dkjson")
local alert_keys = require "alert_keys"
local alert_creators = require "alert_creators"
local format_utils = require "format_utils"
-- #######################################################
local function formatThresholdCross(ifid, alert, threshold_info)
local alert_consts = require("alert_consts")
local entity = alert_consts.formatAlertEntity(ifid, alert_consts.alertEntityRaw(alert["alert_entity"]), alert["alert_entity_val"])
local engine_label = alert_consts.alertEngineLabel(alert_consts.alertEngine(alert_consts.sec2granularity(alert["alert_granularity"])))
return i18n("alert_messages.threshold_crossed", {
granularity = engine_label,
metric = threshold_info.metric,
entity = entity,
host_category = format_utils.formatAddressCategory((json.decode(alert.alert_json)).alert_generation.host_info),
value = string.format("%u", math.ceil(threshold_info.value)),
op = "&".. (threshold_info.operator or "gt") ..";",
threshold = threshold_info.threshold,
})
end
-- #######################################################
return {
alert_key = alert_keys.ntopng.alert_threshold_cross,
i18n_title = "alerts_dashboard.threashold_cross",
i18n_description = formatThresholdCross,
icon = "fas fa-arrow-circle-up",
creator = alert_creators.createThresholdCross,
}