Zabbix

/*

** Copyright (C) 2001-2025 Zabbix SIA

**

** This program is free software: you can redistribute it and/or modify it under the terms of

** the GNU Affero General Public License as published by the Free Software Foundation, version 3.

**

** This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;

** without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

** See the GNU Affero General Public License for more details.

**

** You should have received a copy of the GNU Affero General Public License along with this program.

** If not, see <https://www.gnu.org/licenses/>.

**/

​

#include "events.h"

​

#include "../db_lengths_constants.h"

#include "../actions/actions.h"

​

#include "zbxexpression.h"

#include "zbxexport.h"

#include "zbxservice.h"

#include "zbxnum.h"

#include "zbxstr.h"

#include "zbxexpr.h"

#include "zbxdbwrap.h"

#include "zbx_trigger_constants.h"

#include "zbx_item_constants.h"

#include "zbxcacheconfig.h"

#include "zbxdb.h"

#include "zbxjson.h"

#include "zbxvariant.h"

#include "zbxconnector.h"

#include "zbxtagfilter.h"

#include "zbxescalations.h"

​

/* event recovery data */

typedef struct

{

    zbx_uint64_t    eventid;

    zbx_uint64_t    objectid;

    zbx_db_event    *r_event;

    zbx_uint64_t    correlationid;

    zbx_uint64_t    c_eventid;

    zbx_uint64_t    userid;

    zbx_timespec_t  ts;

}

zbx_event_recovery_t;

​

/* problem event, used to cache open problems for recovery attempts */

typedef struct

{

    zbx_uint64_t        eventid;

    zbx_uint64_t        triggerid;

​

    zbx_vector_tags_ptr_t   tags;

}

zbx_event_problem_t;

​

typedef enum

{

    CORRELATION_MATCH = 0,

    CORRELATION_NO_MATCH,

    CORRELATION_MAY_MATCH

}

zbx_correlation_match_result_t;

​

static zbx_vector_db_event_t    events;

static zbx_hashset_t        event_recovery;

static zbx_hashset_t        correlation_cache;

static zbx_correlation_rules_t  correlation_rules;

​

/******************************************************************************

 *                                                                            *

 * Purpose: Check that tag name is not empty and that tag is not duplicate.   *

 *                                                                            *

 ******************************************************************************/

static int  validate_event_tag(const zbx_db_event* event, const zbx_tag_t *tag)

{

    int i;

​

    if ('\0' == *tag->tag)

        return FAIL;

​

    /* check for duplicated tags */

    for (i = 0; i < event->tags.values_num; i++)

    {

        zbx_tag_t   *event_tag = event->tags.values[i];

​

        if (0 == strcmp(event_tag->tag, tag->tag) && 0 == strcmp(event_tag->value, tag->value))

            return FAIL;