Function NewAlertContext

pkg/alertcontext/alertcontext.go:46–90

(contextToSend map[string][]string, valueLength int)

}

func NewAlertContext(contextToSend map[string][]string, valueLength int) error {
	if valueLength == 0 {
		log.Debugf("No console context value length provided, using default: %d", MaxContextValueLen)
		valueLength = MaxContextValueLen
	}

	if valueLength > MaxContextValueLen {
		log.Debugf("Provided console context value length (%d) is higher than the maximum, using default: %d", valueLength, MaxContextValueLen)
		valueLength = MaxContextValueLen
	}

	ac := Context{
		ContextToSend:         contextToSend,
		ContextValueLen:       valueLength,
		ContextToSendCompiled: make(map[string][]*vm.Program),
	}

	for key, values := range contextToSend {
		if _, ok := ac.ContextToSend[key]; !ok {
			ac.ContextToSend[key] = make([]string, 0)
		}

		if _, ok := ac.ContextToSendCompiled[key]; !ok {
			ac.ContextToSendCompiled[key] = make([]*vm.Program, 0)
		}

		for _, value := range values {
			valueCompiled, err := expr.Compile(value, exprhelpers.GetExprOptions(map[string]any{
				"evt":   &pipeline.Event{},
				"match": &pipeline.MatchedRule{},
				"req":   &http.Request{},
			})...)
			if err != nil {
				return fmt.Errorf("compilation of '%s' context value failed: %w", value, err)
			}

			ac.ContextToSendCompiled[key] = append(ac.ContextToSendCompiled[key], valueCompiled)
			ac.ContextToSend[key] = append(ac.ContextToSend[key], value)
		}
	}

	alertContext.Store(&ac)

	return nil
}

func getAlertContext() *Context {
	if ac := alertContext.Load(); ac != nil {