Function AppsecEventToContext

pkg/alertcontext/alertcontext.go:229–248

Iterate over the individual appsec matched rules to create the needed alert context.

(event pipeline.AppsecEvent, request *http.Request)

// Iterate over the individual appsec matched rules to create the needed alert context.
func AppsecEventToContext(event pipeline.AppsecEvent, request *http.Request) (models.Meta, []error) {
	var errors []error

	tmpContext := make(map[string][]string)

	evt := pipeline.MakeEvent(false, pipeline.LOG, false)
	for _, matched_rule := range event.MatchedRules {
		tmpErrors := EvalAlertContextRules(evt, &matched_rule, request, tmpContext)
		errors = append(errors, tmpErrors...)
	}

	ac := getAlertContext()

	metas, truncErrors := TruncateContextMap(tmpContext, ac.ContextValueLen)
	errors = append(errors, truncErrors...)

	ret := models.Meta(metas)

	return ret, errors
}

// Iterate over the individual events to create the needed alert context.
func EventToContext(events []pipeline.Event) (models.Meta, []error) {