pandorafms/pandora_console/include/functions_events.php

<?php
/**
 * Events library.
 *
 * @category   Library
 * @package    Pandora FMS
 * @subpackage Events
 * @version    1.0.0
 * @license    See below
 *
 *    ______                 ___                    _______ _______ ________
 *   |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
 *  |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
 * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
 *
 * ============================================================================
 * Copyright (c) 2005-2022 Artica Soluciones Tecnologicas
 * Please see http://pandorafms.org for full contribution list
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * as published by the Free Software Foundation for version 2.
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 * ============================================================================
 */

// Begin.
global $config;

require_once $config['homedir'].'/vendor/autoload.php';

use Amp\Promise;
use PandoraFMS\Enterprise\Metaconsole\Node;
use PandoraFMS\Event;

use function Amp\ParallelFunctions\parallelMap;

require_once $config['homedir'].'/include/functions_ui.php';
require_once $config['homedir'].'/include/functions_tags.php';
require_once $config['homedir'].'/include/functions.php';
require_once $config['homedir'].'/include/functions_reporting.php';
enterprise_include_once('include/functions_metaconsole.php');
enterprise_include_once('meta/include/functions_events_meta.php');
enterprise_include_once('meta/include/functions_agents_meta.php');
enterprise_include_once('meta/include/functions_modules_meta.php');
if (is_metaconsole() === true) {
    $id_source_event = get_parameter('id_source_event');
}


/**
 * Translates a numeric value module_status into descriptive text.
 *
 * @param integer $status Module status.
 *
 * @return string Descriptive text.
 */
function events_translate_module_status($status)
{
    switch ($status) {
        case AGENT_MODULE_STATUS_NORMAL:
        return __('NORMAL');

        case AGENT_MODULE_STATUS_CRITICAL_BAD:
        return __('CRITICAL');

        case AGENT_MODULE_STATUS_NO_DATA:
        return __('NOT INIT');

        case AGENT_MODULE_STATUS_CRITICAL_ALERT:
        case AGENT_MODULE_STATUS_NORMAL_ALERT:
        case AGENT_MODULE_STATUS_WARNING_ALERT:
        return __('ALERT');

        case AGENT_MODULE_STATUS_WARNING:
        return __('WARNING');

        default:
        return __('UNKNOWN');
    }
}


/**
 * Translates a numeric value event_type into descriptive text.
 *
 * @param integer $event_type Event type.
 *
 * @return string Descriptive text.
 */
function events_translate_event_type($event_type)
{
    // Event type prepared.
    switch ($event_type) {
        case EVENTS_ALERT_FIRED:
        case EVENTS_ALERT_RECOVERED:
        case EVENTS_ALERT_CEASED:
        case EVENTS_ALERT_MANUAL_VALIDATION:
        return __('ALERT');

        case EVENTS_RECON_HOST_DETECTED:
        case EVENTS_SYSTEM:
        case EVENTS_ERROR:
        case EVENTS_NEW_AGENT:
        case EVENTS_CONFIGURATION_CHANGE:
        return __('SYSTEM');

        case EVENTS_GOING_UP_WARNING:
        case EVENTS_GOING_DOWN_WARNING:
        return __('WARNING');

        case EVENTS_GOING_DOWN_NORMAL:
        case EVENTS_GOING_UP_NORMAL:
        return __('NORMAL');

        case EVENTS_GOING_DOWN_CRITICAL:
        case EVENTS_GOING_UP_CRITICAL:
        return __('CRITICAL');

        case EVENTS_UNKNOWN:
        case EVENTS_GOING_UNKNOWN:
        default:
        return __('UNKNOWN');
    }
}


/**
 * Translates a numeric value event_status into descriptive text.
 *
 * @param integer $status Event status.
 *
 * @return string Descriptive text.
 */
function events_translate_event_status($status)
{
    switch ($status) {
        case EVENT_STATUS_NEW:
        default:
        return __('NEW');

        case EVENT_STATUS_INPROCESS:
        return __('IN PROCESS');

        case EVENT_STATUS_VALIDATED:
        return __('VALIDATED');
    }
}


/**
 * Translates a numeric value criticity into descriptive text.
 *
 * @param integer $criticity Event criticity.
 *
 * @return string Descriptive text.
 */
function events_translate_event_criticity($criticity)
{
    switch ($criticity) {
        case EVENT_CRIT_CRITICAL:
        return __('CRITICAL');

        case EVENT_CRIT_MAINTENANCE:
        return __('MAINTENANCE');

        case EVENT_CRIT_INFORMATIONAL:
        return __('INFORMATIONAL');

        case EVENT_CRIT_MAJOR:
        return __('MAJOR');

        case EVENT_CRIT_MINOR:
        return __('MINOR');

        case EVENT_CRIT_NORMAL:
        return __('NORMAL');

        case EVENT_CRIT_WARNING:
        return __('WARNING');

        default:
        return __('UNKNOWN');
    }
}


/**
 * Return all header string for each event field.
 *
 * @return array
 */
function events_get_all_fields()
{
    $columns = [];

    $columns['id_evento'] = __('Event id');
    $columns['evento'] = __('Event name');
    $columns['id_agente'] = __('Agent name');
    $columns['id_usuario'] = __('User');
    $columns['id_grupo'] = __('Group');
    $columns['estado'] = __('Status');
    $columns['timestamp'] = __('Timestamp');
    $columns['event_type'] = __('Event type');
    $columns['id_agentmodule'] = __('Agent module');
    $columns['id_alert_am'] = __('Alert');
    $columns['criticity'] = __('Severity');
    $columns['user_comment'] = __('Comment');
    $columns['tags'] = __('Tags');
    $columns['source'] = __('Source');
    $columns['id_extra'] = __('Extra id');
    $columns['owner_user'] = __('Owner');
    $columns['ack_utimestamp'] = __('ACK Timestamp');
    $columns['instructions'] = __('Instructions');
    $columns['server_name'] = __('Server name');
    $columns['data'] = __('Data');
    $columns['module_status'] = __('Module status');
    $columns['module_custom_id'] = __('Module custom id');
    $columns['custom_data'] = __('Custom data');

    return $columns;
}


/**
 * Same as events_get_column_names but retrieving only one result.
 *
 * @param string $field Raw field name.
 *
 * @return string Traduction.
 */
function events_get_column_name($field, $table_alias=false)
{
    switch ($field) {
        case 'id_evento':
        return __('Event Id');

        case 'evento':
        return __('Event Name');

        case 'id_agente':
        return __('Agent ID');

        case 'agent_name':
        return __('Agent name');

        case 'agent_alias':
        return __('Agent alias');

        case 'id_usuario':
        return __('User');

        case 'id_grupo':
        return __('Group');

        case 'estado':
        return __('Status');

        case 'timestamp':
        return __('Timestamp');

        case 'event_type':
        return __('Event Type');

        case 'id_agentmodule':
        return __('Module Name');

        case 'id_alert_am':
        return __('Alert');

        case 'criticity':
        return __('Severity');

        case 'user_comment':
        return __('Comment');

        case 'tags':
        return __('Tags');

        case 'source':
        return __('Source');

        case 'id_extra':
        return __('Extra Id');

        case 'owner_user':
        return __('Owner');

        case 'ack_utimestamp':
        return __('ACK Timestamp');

        case 'instructions':
        return __('Instructions');

        case 'server_name':
        return __('Server Name');

        case 'data':
        return __('Data');

        case 'module_status':
        return __('Module Status');

        case 'module_custom_id':
        return __('Module custom ID');

        case 'options':
        return __('Options');

        case 'mini_severity':
            if ($table_alias === true) {
                return 'S';
            } else {
                return __('Severity mini');
            }

        case 'direccion':
        return __('Agent IP');

        case 'custom_data':
        return __('Custom data');

        default:
        return __($field);
    }
}


/**
 * Return column names from fields selected.
 *
 * @param array $fields Array of fields.
 *
 * @return array Names array.
 */
function events_get_column_names($fields, $table_alias=false)
{
    if (isset($fields) === false
        || is_array($fields) === false
    ) {
        return [];
    }

    $names = [];
    foreach ($fields as $f) {
        if (is_array($f) === true) {
            $name = [];
            $name['text'] = events_get_column_name($f['text'], $table_alias);
            $name['class'] = ($f['class'] ?? '');
            $name['style'] = ($f['style'] ?? '');
            $name['extra'] = ($f['extra'] ?? '');
            $name['id'] = ($f['id'] ?? '');
            $names[] = $name;
        } else {
            $names[] = events_get_column_name($f, $table_alias);
        }
    }

    return $names;

}


/**
 * Validates all events matching target filter.
 *
 * @param integer $id_evento  Master event.
 * @param array   $filter     Optional. Filter options.
 * @param boolean $history    Apply on historical table.
 * @param boolean $force_node Force node table.
 *
 * @return integer Events validated or false if error.
 */
function events_delete($id_evento, $filter=null, $history=false, $force_node=false)
{
    if (isset($id_evento) === false
        || $id_evento <= 0
    ) {
        return false;
    }

    if (isset($filter) === false
        || is_array($filter) === true
    ) {
        $filter = ['group_rep' => 0];
    }

    switch ($filter['group_rep']) {
        case '0':
        case '2':
        default:
            // No groups option direct update.
            $delete_sql = sprintf(
                'DELETE FROM tevento
                 WHERE id_evento = %d',
                $id_evento
            );
        break;

        case '1':
            // Group by events.
            $sql = events_get_all(
                ['te.*'],
                $filter,
                // Offset.
                null,
                // Limit.
                null,
                // Order.
                null,
                // Sort_field.
                null,
                // Historical table.
                $history,
                // Return_sql.
                true
            );

            $target_ids = db_get_all_rows_sql(
                sprintf(
                    'SELECT tu.id_evento FROM tevento tu INNER JOIN ( %s ) tf
                    ON tu.estado = tf.estado
                    AND tu.evento = tf.evento
                    AND tu.id_agente = tf.id_agente
                    AND tu.id_agentmodule = tf.id_agentmodule
                    AND tf.max_id_evento = %d',
                    $sql,
                    $id_evento
                )
            );

            // Try to avoid deadlock while updating full set.
            if ($target_ids !== false && count($target_ids) > 0) {
                $target_ids = array_reduce(
                    $target_ids,
                    function ($carry, $item) {
                        $carry[] = $item['id_evento'];
                        return $carry;
                    }
                );

                $delete_sql = sprintf(
                    'DELETE FROM tevento WHERE id_evento IN (%s)',
                    join(', ', $target_ids)
                );
            }
        break;
    }

    return db_process_sql($delete_sql);
}


/**
 * Validates all events matching target filter.
 *
 * @param integer $id_evento Master event.
 * @param integer $status    Target status.
 * @param array   $filter    Optional. Filter options.
 *
 * @return integer Events validated or false if error.
 */
function events_update_status($id_evento, $status, $filter=null)
{
    global $config;

    if (!$status) {
        return false;
    }

    if (isset($id_evento) === false || $id_evento <= 0) {
        return false;
    }

    if (isset($filter) === false || is_array($filter) === false) {
        $filter = ['group_rep' => 0];
    }

    switch ($filter['group_rep']) {
        case '0':
        case '2':
        default:
            // No groups option direct update.
            $update_sql = sprintf(
                'UPDATE tevento
                 SET estado = %d
                 WHERE id_evento = %d',
                $status,
                $id_evento
            );
        break;

        case '1':
            // Group by events.
            $sql = events_get_all(
                ['te.*'],
                $filter,
                // Offset.
                null,
                // Limit.
                null,
                // Order.
                null,
                // Sort_field.
                null,
                // Historical table.
                false,
                // Return_sql.
                true
            );

            $target_ids = db_get_all_rows_sql(
                sprintf(
                    'SELECT tu.id_evento FROM tevento tu INNER JOIN ( %s ) tf
                    ON tu.estado = tf.estado
                    AND tu.evento = tf.evento
                    AND tu.id_agente = tf.id_agente
                    AND tu.id_agentmodule = tf.id_agentmodule
                    AND tf.max_id_evento = %d',
                    $sql,
                    $id_evento
                )
            );

            // Try to avoid deadlock while updating full set.
            if ($target_ids !== false && count($target_ids) > 0) {
                $target_ids = array_reduce(
                    $target_ids,
                    function ($carry, $item) {
                        $carry[] = $item['id_evento'];
                        return $carry;
                    }
                );

                $update_sql = sprintf(
                    'UPDATE tevento
                    SET estado = %d,
                        ack_utimestamp = %d,
                        id_usuario = "%s"
                    WHERE id_evento IN (%s)',
                    $status,
                    time(),
                    $config['id_user'],
                    join(',', $target_ids)
                );
            }
        break;
    }

    $result = db_process_sql($update_sql);

    if ($result !== false) {
        switch ($status) {
            case EVENT_STATUS_NEW:
                $status_string = 'New';
            break;

            case EVENT_STATUS_VALIDATED:
                events_change_owner(
                    $id_evento,
                    $config['id_user'],
                    false
                );

                $status_string = 'Validated';
            break;

            case EVENT_STATUS_INPROCESS:
                $status_string = 'In process';
            break;

            default:
                $status_string = '';
            break;
        }

        events_comment(
            $id_evento,
            '',
            'Change status to '.$status_string
        );
    }

    return $result;
}


/**
 * Retrieve all events filtered.
 *
 * @param array   $fields          Fields to retrieve.
 * @param array   $filter          Filters to be applied.
 * @param integer $offset          Offset (pagination).
 * @param integer $limit           Limit (pagination).
 * @param string  $order           Sort order.
 * @param string  $sort_field      Sort field.
 * @param boolean $history         Apply on historical table.
 * @param boolean $return_sql      Return SQL (true) or execute it (false).
 * @param string  $having          Having filter.
 * @param boolean $validatedEvents If true, evaluate validated events.
 * @param boolean $recursiveGroups If true, filtered groups and their children
 *                                 will be search.
 * @param boolean $nodeConnected   Already connected to node (uses tevento).
 *
 * Available filters:
 *  [
 *     'date_from'
 *     'time_from'
 *     'date_to'
 *     'time_to'
 *     'event_view_hr'
 *     'id_agent'
 *     'event_type'
 *     'severity'
 *     'id_group_filter'
 *     'status'
 *     'agent_alias'
 *     'search'
 *     'id_extra'
 *     'id_source_event'
 *     'user_comment'
 *     'source'
 *     'id_user_ack'
 *     'tag_with'
 *     'tag_without'
 *     'filter_only_alert'
 *     'search_secondary_groups'
 *     'module_search'
 *     'group_rep'
 *     'server_id'
 *  ].
 *
 * @return array Events.
 * @throws Exception On error.
 */
function events_get_all(
    $fields,
    array $filter,
    $offset=null,
    $limit=null,
    $order=null,
    $sort_field=null,
    $history=false,
    $return_sql=false,
    $having='',
    $validatedEvents=false,
    $recursiveGroups=true,
    $nodeConnected=false
) {
    global $config;

    $user_is_admin = users_is_admin();

    if (is_array($filter) === false) {
        error_log('[events_get_all] Filter must be an array.');
        throw new Exception('[events_get_all] Filter must be an array.');
    }

    $count = false;
    if (is_array($fields) === false && $fields === 'count'
        || (is_array($fields) === true && $fields[0] === 'count')
    ) {
        $fields = ['te.*'];
        $count = true;
    } else if (is_array($fields) === false) {
        error_log('[events_get_all] Fields must be an array or "count".');
        throw new Exception(
            '[events_get_all] Fields must be an array or "count".'
        );
    }

    if (isset($filter['date_from']) === true
        && empty($filter['date_from']) === false
        && $filter['date_from'] !== '0000-00-00'
    ) {
        $date_from = $filter['date_from'];
    }

    if (isset($filter['time_from']) === true) {
        $time_from = (empty($filter['time_from']) === true) ? '00:00:00' : $filter['time_from'];
    }

    if (isset($date_from) === true) {
        if (isset($time_from) === false) {
            $time_from = '00:00:00';
        }

        $from = $date_from.' '.$time_from;
        $sql_filters[] = sprintf(
            ' AND te.utimestamp >= %d',
            strtotime($from)
        );
    }

    if (isset($filter['date_to']) === true
        && empty($filter['date_to']) === false
        && $filter['date_to'] !== '0000-00-00'
    ) {
        $date_to = $filter['date_to'];
    }

    if (isset($filter['time_to']) === true) {
        $time_to = (empty($filter['time_to']) === true) ? '23:59:59' : $filter['time_to'];
    }

    if (isset($date_to) === true) {
        if (isset($time_to) === false) {
            $time_to = '23:59:59';
        }

        $to = $date_to.' '.$time_to;
        $sql_filters[] = sprintf(
            ' AND te.utimestamp <= %d',
            strtotime($to)
        );
    }

    if (isset($from) === false) {
        if (isset($filter['event_view_hr']) === true && ($filter['event_view_hr'] > 0)) {
            $sql_filters[] = sprintf(
                ' AND utimestamp > UNIX_TIMESTAMP(now() - INTERVAL %d HOUR) ',
                $filter['event_view_hr']
            );
        }
    }

    if (isset($filter['id_agent']) === true && $filter['id_agent'] > 0) {
        $sql_filters[] = sprintf(
            ' AND te.id_agente = %d ',
            $filter['id_agent']
        );
    }

    if (isset($filter['id_agentmodule']) === true && $filter['id_agentmodule'] > 0) {
        $sql_filters[] = sprintf(
            ' AND te.id_agentmodule = %d ',
            $filter['id_agentmodule']
        );
    }

    if (empty($filter['event_type']) === false && $filter['event_type'] !== 'all') {
        if (is_array($filter['event_type']) === true) {
            $type = [];
            if (in_array('all', $filter['event_type']) === false) {
                foreach ($filter['event_type'] as $event_type) {
                    if ($event_type != '') {
                        // If normal, warning, could be several
                        // (going_up_warning, going_down_warning... too complex.
                        // Shown to user only "warning, critical and normal".
                        if ($event_type == 'warning' || $event_type == 'critical' || $event_type == 'normal') {
                            $type[] = " event_type LIKE '%".$event_type."%' ";
                        } else if ($event_type == 'not_normal') {
                            $type[] = " (event_type LIKE '%warning%' OR event_type LIKE '%critical%' OR event_type LIKE '%unknown%') ";
                        } else if ($event_type != 'all') {
                            $type[] = " event_type = '".$event_type."'";
                        }
                    }
                }

                $sql_filters[] = ' AND ('.implode(' OR ', $type).')';
            }
        } else {
            if ($filter['event_type'] === 'warning'
                || $filter['event_type'] === 'critical'
                || $filter['event_type'] === 'normal'
            ) {
                $sql_filters[] = ' AND event_type LIKE "%'.$filter['event_type'].'%"';
            } else if ($filter['event_type'] === 'not_normal') {
                $sql_filters[] = ' AND (event_type LIKE "%warning%"
              OR event_type LIKE "%critical%"
              OR event_type LIKE "%unknown%")';
            } else {
                $sql_filters[] = ' AND event_type = "'.$filter['event_type'].'"';
            }
        }
    }

    if (isset($filter['severity']) === true && $filter['severity'] > 0) {
        if (is_array($filter['severity']) === true) {
            if (in_array(-1, $filter['severity']) === false) {
                $not_normal = array_search(EVENT_CRIT_NOT_NORMAL, $filter['severity']);
                if ($not_normal !== false) {
                    unset($filter['severity'][$not_normal]);
                    $sql_filters[] = sprintf(
                        ' AND criticity != %d',
                        EVENT_CRIT_NORMAL
                    );
                } else {
                    $critical_warning = array_search(EVENT_CRIT_WARNING_OR_CRITICAL, $filter['severity']);
                    if ($critical_warning !== false) {
                        unset($filter['severity'][$critical_warning]);
                        $filter['severity'][] = EVENT_CRIT_WARNING;
                        $filter['severity'][] = EVENT_CRIT_CRITICAL;
                    }

                    $critical_normal = array_search(EVENT_CRIT_OR_NORMAL, $filter['severity']);
                    if ($critical_normal !== false) {
                        unset($filter['severity'][$critical_normal]);
                        $filter['severity'][] = EVENT_CRIT_NORMAL;
                        $filter['severity'][] = EVENT_CRIT_CRITICAL;
                    }

                    if (empty($filter['severity']) === false) {
                        $filter['severity'] = implode(',', $filter['severity']);
                        $sql_filters[] = sprintf(
                            ' AND criticity IN (%s)',
                            $filter['severity']
                        );
                    }
                }
            }
        } else {
            switch ($filter['severity']) {
                case EVENT_CRIT_MAINTENANCE:
                case EVENT_CRIT_INFORMATIONAL:
                case EVENT_CRIT_NORMAL:
                case EVENT_CRIT_MINOR:
                case EVENT_CRIT_WARNING:
                case EVENT_CRIT_MAJOR:
                case EVENT_CRIT_CRITICAL:
                default:
                    $sql_filters[] = sprintf(
                        ' AND criticity = %d ',
                        $filter['severity']
                    );
                break;

                case EVENT_CRIT_WARNING_OR_CRITICAL:
                    $sql_filters[] = sprintf(
                        ' AND (criticity = %d OR criticity = %d)',
                        EVENT_CRIT_WARNING,
                        EVENT_CRIT_CRITICAL
                    );
                break;

                case EVENT_CRIT_NOT_NORMAL:
                    $sql_filters[] = sprintf(
                        ' AND criticity != %d',
                        EVENT_CRIT_NORMAL
                    );
                break;

                case EVENT_CRIT_OR_NORMAL:
                    $sql_filters[] = sprintf(
                        ' AND (criticity = %d OR criticity = %d)',
                        EVENT_CRIT_NORMAL,
                        EVENT_CRIT_CRITICAL
                    );
                break;
            }
        }
    }

    $groups = (isset($filter['id_group_filter']) === true) ? $filter['id_group_filter'] : null;
    if ((bool) $user_is_admin === false
        && isset($groups) === false
    ) {
        // Not being filtered by group but not an admin, limit results.
        $groups = array_keys(users_get_groups(false, 'AR'));
    }

    if (isset($groups) === true
        && (is_array($groups) === true || ($groups > 0))
    ) {
        if ($recursiveGroups === true) {
            // Add children groups.
            $children = [];
            if (is_array($groups) === true) {
                foreach ($groups as $g) {
                    $children = array_merge(
                        groups_get_children($g),
                        $children
                    );
                }
            } else {
                $children = groups_get_children($groups);
            }

            if (is_array($groups) === true) {
                $_groups = $groups;
            } else {
                $_groups = [ $groups ];
            }

            if (empty($children) === false) {
                foreach ($children as $child) {
                    $_groups[] = (int) $child['id_grupo'];
                }
            }

            if ((bool) $user_is_admin === false) {
                $user_groups = users_get_groups(false, 'AR');
                $_groups = array_intersect(
                    $_groups,
                    array_keys($user_groups)
                );
            }

            $groups = $_groups;
        }

        if (is_array($groups) === false) {
            $groups = [ $groups ];
        }

        if ((bool) $filter['search_secondary_groups'] === true) {
            $sql_filters[] = sprintf(
                ' AND (te.id_grupo IN (%s) OR tasg.id_group IN (%s))',
                join(',', $groups),
                join(',', $groups)
            );
        } else {
            $sql_filters[] = sprintf(
                ' AND te.id_grupo IN (%s)',
                join(',', $groups)
            );
        }
    }

    // Skip system messages if user is not PM.
    if (!check_acl($config['id_user'], 0, 'PM')) {
        $sql_filters[] = ' AND te.id_grupo != 0 ';
    }

    if (isset($filter['status']) === true) {
        if (is_array($filter['status']) === true) {
            $status_all = 0;
            foreach ($filter['status'] as $key => $value) {
                switch ($value) {
                    case EVENT_ALL:
                        $status_all = 1;
                    break;

                    case EVENT_NO_VALIDATED:
                        $filter['status'][$key] = (EVENT_NEW.', '.EVENT_PROCESS);
                    default:
                        // Ignore.
                    break;
                }
            }

            if ($status_all === 0) {
                $sql_filters[] = sprintf(
                    ' AND estado IN (%s)',
                    implode(', ', $filter['status'])
                );
            }
        } else {
            switch ($filter['status']) {
                case EVENT_ALL:
                default:
                    // Do not filter.
                break;

                case EVENT_NEW:
                case EVENT_VALIDATE:
                case EVENT_PROCESS:
                    $sql_filters[] = sprintf(
                        ' AND estado = %d',
                        $filter['status']
                    );
                break;

                case EVENT_NO_VALIDATED:
                    // Show comments in validated events.
                    $validatedState = '';
                    if ($validatedEvents === true) {
                        $validatedState = sprintf(
                            'OR estado = %d',
                            EVENT_VALIDATE
                        );
                    }

                    $sql_filters[] = sprintf(
                        ' AND (estado = %d OR estado = %d %s)',
                        EVENT_NEW,
                        EVENT_PROCESS,
                        $validatedState
                    );
                break;
            }
        }
    }

    if (!$user_is_admin && users_can_manage_group_all('ER') === false) {
        $ER_groups = users_get_groups($config['id_user'], 'ER', true);
        $EM_groups = users_get_groups($config['id_user'], 'EM', true, true);
        $EW_groups = users_get_groups($config['id_user'], 'EW', true, true);

        // Get groups where user have ER grants.
        if ((bool) $filter['search_secondary_groups'] === true) {
            $sql_filters[] = sprintf(
                ' AND (te.id_grupo IN ( %s ) OR tasg.id_group IN (%s))',
                join(', ', array_keys($ER_groups)),
                join(', ', array_keys($ER_groups))
            );
        } else {
            $sql_filters[] = sprintf(
                ' AND te.id_grupo IN ( %s )',
                join(', ', array_keys($ER_groups))
            );
        }
    }

    // Prepare agent join sql filters.
    $table = 'tevento';
    $tevento = 'tevento te';
    $agent_join_filters = [];
    $tagente_table = 'tagente';
    $tagente_field = 'id_agente';
    $conditionMetaconsole = '';

    // Agent alias.
    if (empty($filter['agent_alias']) === false) {
        $agent_join_filters[] = sprintf(
            ' AND ta.alias = "%s" ',
            $filter['agent_alias']
        );
    }

    // Free search.
    if (empty($filter['search']) === false) {
        if (isset($config['dbconnection']->server_version) === true
            && $config['dbconnection']->server_version > 50600
        ) {
            // Use "from_base64" requires mysql 5.6 or greater.
            $custom_data_search = 'from_base64(te.custom_data)';
        } else {
            // Custom data is JSON encoded base64, if 5.6 or lower,
            // user is condemned to use plain search.
            $custom_data_search = 'te.custom_data';
        }

        $sql_filters[] = vsprintf(
            ' AND (lower(ta.alias) like lower("%%%s%%")
                OR te.id_evento like "%%%s%%"
                OR lower(te.evento) like lower("%%%s%%")
                OR lower(te.user_comment) like lower("%%%s%%")
                OR lower(te.id_extra) like lower("%%%s%%")
                OR lower(te.source) like lower("%%%s%%")
                OR lower('.$custom_data_search.') like lower("%%%s%%") )',
            array_fill(0, 7, $filter['search'])
        );
    }

    // Free search exclude.
    if (empty($filter['search_exclude']) === false) {
        $sql_filters[] = vsprintf(
            ' AND (lower(ta.alias) not like lower("%%%s%%")
                AND te.id_evento not like "%%%s%%"
                AND lower(te.evento) not like lower("%%%s%%")
                AND lower(te.user_comment) not like lower("%%%s%%")
                AND lower(te.id_extra) not like lower("%%%s%%")
                AND lower(te.source) not like lower("%%%s%%") )',
            array_fill(0, 6, $filter['search_exclude'])
        );
    }

    // Id extra.
    if (empty($filter['id_extra']) === false) {
        $sql_filters[] = sprintf(
            ' AND lower(te.id_extra) like lower("%%%s%%") ',
            $filter['id_extra']
        );
    }

    // User comment.
    if (empty($filter['user_comment']) === false) {
        // For filter field.
        $sql_filters[] = sprintf(
            ' AND lower(te.user_comment) like lower("%%%s%%") ',
            io_safe_input($filter['user_comment'])
        );

        // For show comments on event details.
        $sql_filters[] = sprintf(
            ' OR lower(te.user_comment) like lower("%%%s%%") ',
            $filter['user_comment']
        );
    }

    // Source.
    if (empty($filter['source']) === false) {
        $sql_filters[] = sprintf(
            ' AND lower(te.source) like lower("%%%s%%") ',
            $filter['source']
        );
    }

    // Custom data.
    if (empty($filter['custom_data']) === false) {
        if (isset($config['dbconnection']->server_version) === true
            && $config['dbconnection']->server_version > 80000
        ) {
            if ($filter['custom_data_filter_type'] === '1') {
                $sql_filters[] = sprintf(
                    ' AND JSON_VALID(custom_data) = 1
                    AND (JSON_EXTRACT(custom_data, "$.*") LIKE lower("%%%s%%") COLLATE utf8mb4_0900_ai_ci) ',
                    io_safe_output($filter['custom_data'])
                );
            } else {
                $sql_filters[] = sprintf(
                    ' AND JSON_VALID(custom_data) = 1
                    AND (JSON_SEARCH(JSON_KEYS(custom_data), "all", lower("%%%s%%") COLLATE utf8mb4_0900_ai_ci) IS NOT NULL) ',
                    io_safe_output($filter['custom_data'])
                );
            }
        } else {
            if ($filter['custom_data_filter_type'] === '1') {
                $sql_filters[] = sprintf(
                    ' AND JSON_VALID(custom_data) = 1 AND JSON_EXTRACT(custom_data, "$.*") LIKE lower("%%%s%%") ',
                    $filter['custom_data'],
                    $filter['custom_data']
                );
            } else {
                $sql_filters[] = sprintf(
                    ' AND JSON_VALID(custom_data) = 1 AND JSON_KEYS(custom_data) REGEXP "%s" ',
                    $filter['custom_data'],
                    $filter['custom_data']
                );
            }
        }
    }

    // Validated or in process by.
    if (empty($filter['id_user_ack']) === false) {
        $sql_filters[] = sprintf(
            ' AND te.owner_user like lower("%%%s%%") ',
            $filter['id_user_ack']
        );
    }

    $tag_names = [];
    // With following tags.
    if (empty($filter['tag_with']) === false) {
        $tag_with = base64_decode($filter['tag_with']);
        $tags = json_decode($tag_with, true);
        if (is_array($tags) === true && in_array('0', $tags) === false) {
            if (!$user_is_admin) {
                $getUserTags = tags_get_tags_for_module_search();
                // Prevent false value for array_flip.
                if ($getUserTags === false) {
                    $getUserTags = [];
                }

                $user_tags = array_flip($getUserTags);
                if ($user_tags != null) {
                    foreach ($tags as $id_tag) {
                        // User cannot filter with those tags.
                        if (array_search($id_tag, $user_tags) === false) {
                            return false;
                        }
                    }
                }
            }

            $_tmp = '';
            foreach ($tags as $id_tag) {
                if (isset($tags_names[$id_tag]) === false) {
                    $tags_names[$id_tag] = tags_get_name($id_tag);
                }

                if ($tags[0] === $id_tag) {
                    $_tmp .= ' AND (( ';
                } else {
                    $_tmp .= ' OR ( ';
                }

                $_tmp .= sprintf(
                    ' tags LIKE "%s" OR',
                    $tags_names[$id_tag]
                );

                $_tmp .= sprintf(
                    ' tags LIKE "%s,%%" OR',
                    $tags_names[$id_tag]
                );

                $_tmp .= sprintf(
                    ' tags LIKE "%%,%s" OR',
                    $tags_names[$id_tag]
                );

                $_tmp .= sprintf(
                    ' tags LIKE "%%,%s,%%" ',
                    $tags_names[$id_tag]
                );

                if ($tags[0] === $id_tag) {
                    $_tmp .= ')) ';
                } else {
                    $_tmp .= ') ';
                }
            }

            $sql_filters[] = $_tmp;
        }
    }

    // Without following tags.
    if (empty($filter['tag_without']) === false) {
        $tag_without = base64_decode($filter['tag_without']);
        $tags = json_decode($tag_without, true);
        if (is_array($tags) === true && in_array('0', $tags) === false) {
            if (!$user_is_admin) {
                $user_tags = array_flip(tags_get_tags_for_module_search());
                if ($user_tags != null) {
                    foreach ($tags as $key_tag => $id_tag) {
                        // User cannot filter with those tags.
                        if (!array_search($id_tag, $user_tags)) {
                            unset($tags[$key_tag]);
                            continue;
                        }
                    }
                }
            }

            foreach ($tags as $id_tag) {
                if (isset($tags_names[$id_tag]) === false) {
                    $tags_names[$id_tag] = tags_get_name($id_tag);
                }

                $_tmp .= sprintf(
                    ' AND tags NOT LIKE "%s" ',
                    $tags_names[$id_tag]
                );
                $_tmp .= sprintf(
                    ' AND tags NOT LIKE "%s,%%" ',
                    $tags_names[$id_tag]
                );
                $_tmp .= sprintf(
                    ' AND tags NOT LIKE "%%,%s" ',
                    $tags_names[$id_tag]
                );
                $_tmp .= sprintf(
                    ' AND tags NOT LIKE "%%,%s,%%" ',
                    $tags_names[$id_tag]
                );
            }

            $sql_filters[] = $_tmp;
        }
    }

    // Filter/ Only alerts.
    if (isset($filter['filter_only_alert']) === true) {
        if ($filter['filter_only_alert'] == 0) {
            $sql_filters[] = ' AND event_type NOT LIKE "%alert%"';
        } else if ($filter['filter_only_alert'] == 1) {
            $sql_filters[] = ' AND event_type LIKE "%alert%"';
        }
    }

    $user_admin_group_all = ($user_is_admin && $groups == 0) ? '' : 'tasg.';

    // TAgs ACLS.
    if (check_acl($config['id_user'], 0, 'ER')) {
        $tags_acls_condition = tags_get_acl_tags(
            // Id_user.
            $config['id_user'],
            // Id_group.
            ($ER_groups ?? ''),
            // Access.
            'ER',
            // Return_mode.
            'event_condition',
            // Query_prefix.
            'AND',
            // Query_table.
            '',
            // Meta.
            is_metaconsole() && $nodeConnected === false,
            // Childrens_ids.
            [],
            // Force_group_and_tag.
            true,
            // Table tag for id_grupo.
            'te.',
            // Alt table tag for id_grupo.
            $user_admin_group_all
        );
        // FORCE CHECK SQL "(TAG = tag1 AND id_grupo = 1)".
    } else if (check_acl($config['id_user'], 0, 'EW')) {
        $tags_acls_condition = tags_get_acl_tags(
            // Id_user.
            $config['id_user'],
            // Id_group.
            $EW_groups,
            // Access.
            'EW',
            // Return_mode.
            'event_condition',
            // Query_prefix.
            'AND',
            // Query_table.
            '',
            // Meta.
            is_metaconsole() && $nodeConnected === false,
            // Childrens_ids.
            [],
            // Force_group_and_tag.
            true,
            // Table tag for id_grupo.
            'te.',
            // Alt table tag for id_grupo.
            $user_admin_group_all
        );
        // FORCE CHECK SQL "(TAG = tag1 AND id_grupo = 1)".
    } else if (check_acl($config['id_user'], 0, 'EM')) {
        $tags_acls_condition = tags_get_acl_tags(
            // Id_user.
            $config['id_user'],
            // Id_group.
            $EM_groups,
            // Access.
            'EM',
            // Return_mode.
            'event_condition',
            // Query_prefix.
            'AND',
            // Query_table.
            '',
            // Meta.
            is_metaconsole() && $nodeConnected === false,
            // Childrens_ids.
            [],
            // Force_group_and_tag.
            true,
            // Table tag for id_grupo.
            'te.',
            // Alt table tag for id_grupo.
            $user_admin_group_all
        );
        // FORCE CHECK SQL "(TAG = tag1 AND id_grupo = 1)".
    }

    if (($tags_acls_condition != ERR_WRONG_PARAMETERS)
        && ($tags_acls_condition != ERR_ACL)
    ) {
        $sql_filters[] = $tags_acls_condition;
    }

    // Module search.
    $agentmodule_join = 'LEFT JOIN tagente_modulo am ON te.id_agentmodule = am.id_agente_modulo';
    if (empty($filter['module_search']) === false) {
        $agentmodule_join = 'INNER JOIN tagente_modulo am ON te.id_agentmodule = am.id_agente_modulo';
        $sql_filters[] = sprintf(
            ' AND am.nombre = "%s" ',
            $filter['module_search']
        );
    }

    // Order.
    $order_by = '';
    if (isset($order, $sort_field) === true) {
        if (isset($filter['group_rep']) === true && $filter['group_rep'] == 1) {
            $order_by = events_get_sql_order('MAX('.$sort_field.')', $order);
        } else {
            $order_by = events_get_sql_order($sort_field, $order);
        }
    }

    // Id server.
    $id_server = 0;
    if (empty($filter['id_server']) === false) {
        $id_server = $filter['id_server'];
    } else if (empty($filter['server_id']) === false) {
        $id_server = $filter['server_id'];
    }

    // Pagination.
    $pagination = '';
    if (is_metaconsole() === true
        && empty($id_server) === true
        && isset($filter['csv_all']) === false
    ) {
        // TODO: XXX TIP. captura el error.
        $pagination = sprintf(
            ' LIMIT  %d',
            $config['max_number_of_events_per_node']
        );
    } else if (isset($limit, $offset) === true && $limit > 0) {
        $pagination = sprintf(' LIMIT %d OFFSET %d', $limit, $offset);
    }

    // Group by.
    $group_by = 'GROUP BY ';
    $tagente_join = 'LEFT';
    if (isset($filter['group_rep']) === false) {
        $filter['group_rep'] = 0;
    }

    switch ($filter['group_rep']) {
        case '0':
        default:
            // All events.
            $group_by = '';
        break;

        case '1':
            // Group by events.
            $group_by .= 'te.evento, te.id_agente, te.id_agentmodule';
        break;

        case '2':
            // Group by agents.
            $tagente_join = 'INNER';
            $group_by = '';
            $order_by = events_get_sql_order('te.id_agente', 'asc');
            if (isset($order, $sort_field) === true) {
                $order_by .= ','.events_get_sql_order(
                    $sort_field,
                    $order,
                    0,
                    true
                );
            }
        break;
    }

    $tgrupo_join = 'LEFT';
    $tgrupo_join_filters = [];

    if (isset($groups) === true
        && (is_array($groups) === true
        || $groups > 0)
    ) {
        $tgrupo_join = 'INNER';
        if (is_array($groups) === true) {
            if ((bool) $filter['search_secondary_groups'] === true) {
                $tgrupo_join_filters[] = sprintf(
                    ' (te.id_grupo = tg.id_grupo AND tg.id_grupo IN (%s))
                    OR (tg.id_grupo = tasg.id_group AND tasg.id_group IN (%s))',
                    join(', ', $groups),
                    join(', ', $groups)
                );
            } else {
                $tgrupo_join_filters[] = sprintf(
                    ' (te.id_grupo = tg.id_grupo AND tg.id_grupo IN (%s))',
                    join(', ', $groups)
                );
            }
        } else {
            if ((bool) $filter['search_secondary_groups'] === true) {
                $tgrupo_join_filters[] = sprintf(
                    ' (te.id_grupo = tg.id_grupo AND tg.id_grupo = %s)
                    OR (tg.id_grupo = tasg.id_group AND tasg.id_group = %s)',
                    $groups,
                    $groups
                );
            } else {
                $tgrupo_join_filters[] = sprintf(
                    ' (te.id_grupo = tg.id_grupo AND tg.id_grupo = %s)',
                    $groups
                );
            }
        }
    } else {
        $tgrupo_join_filters[] = ' te.id_grupo = tg.id_grupo';
    }

    // Secondary groups.
    $event_lj = '';
    if (!$user_is_admin || ($user_is_admin && isset($groups) === true && $groups > 0)) {
        db_process_sql('SET group_concat_max_len = 9999999');
        if ((bool) $filter['search_secondary_groups'] === true) {
            $event_lj = events_get_secondary_groups_left_join($table);
        }
    }

    $group_selects = '';
    if ($group_by != '') {
        if ($count === false) {
            $idx = array_search('te.user_comment', $fields);
            if ($idx !== false) {
                unset($fields[$idx]);
            }

            $group_selects = sprintf(
                ',COUNT(id_evento) AS event_rep,
                %s
                MAX(utimestamp) as timestamp_last,
                MIN(utimestamp) as timestamp_first,
                MAX(id_evento) as max_id_evento',
                ($idx !== false) ? 'GROUP_CONCAT(DISTINCT user_comment SEPARATOR "<br>") AS comments,' : ''
            );
        }
    } else {
        $idx = array_search('te.user_comment', $fields);
        if ($idx !== false) {
            $fields[$idx] = 'te.user_comment AS comments';
        }
    }

    $sql = sprintf(
        'SELECT %s
            %s
         FROM %s
         %s
         %s
         %s JOIN %s ta
           ON ta.%s = te.id_agente
           %s
           %s
         %s JOIN tgrupo tg
           ON %s
         WHERE 1=1
         %s
         %s
         %s
         %s
         %s
         ',
        join(',', $fields),
        $group_selects,
        $tevento,
        $event_lj,
        $agentmodule_join,
        $tagente_join,
        $tagente_table,
        $tagente_field,
        $conditionMetaconsole,
        join(' ', $agent_join_filters),
        $tgrupo_join,
        join(' ', $tgrupo_join_filters),
        join(' ', $sql_filters),
        $group_by,
        $order_by,
        $pagination,
        $having
    );

    if ($return_sql === true) {
        return $sql;
    }

    if (!$user_is_admin) {
        // XXX: Confirm there's no extra grants unhandled!.
        $can_manage = '0 as user_can_manage';
        if (empty($EM_groups) === false) {
            $can_manage = sprintf(
                '(tbase.id_grupo IN (%s)) as user_can_manage',
                join(', ', array_keys($EM_groups))
            );
        }

        $can_write = '0 as user_can_write';
        if (empty($EW_groups) === false) {
            $can_write = sprintf(
                '(tbase.id_grupo IN (%s)) as user_can_write',
                join(', ', array_keys($EW_groups))
            );
        }

        $sql = sprintf(
            'SELECT
                tbase.*,
                %s,
                %s
            FROM
                (',
            $can_manage,
            $can_write
        ).$sql.') tbase';
    } else {
        $sql = 'SELECT
                tbase.*,
                1 as user_can_manage,
                1 as user_can_write
            FROM
                ('.$sql.') tbase';
    }

    if ($count === true
        && (is_metaconsole() === false
        || (is_metaconsole() === true && empty($filter['server_id']) === false))
    ) {
        $sql = 'SELECT count(*) as nitems FROM ('.$sql.') tt';
    }

    if (is_metaconsole() === true) {
        $result_meta = [];
        $metaconsole_connections = metaconsole_get_names(['disabled' => 0]);
        if (isset($metaconsole_connections) === true
            && is_array($metaconsole_connections) === true
        ) {
            try {
                if (empty($id_server) === true) {
                    $metaconsole_connections = array_flip($metaconsole_connections);
                    $metaconsole_connections['meta'] = 0;
                } else {
                    $only_id_server[$metaconsole_connections[$id_server]] = $id_server;
                    $metaconsole_connections = $only_id_server;
                }

                $result_meta = Promise\wait(
                    parallelMap(
                        $metaconsole_connections,
                        function ($node_int) use ($sql) {
                            try {
                                if (is_metaconsole() === true
                                    && (int) $node_int > 0
                                ) {
                                    $node = new Node($node_int);
                                    $node->connect();
                                }

                                $res = db_get_all_rows_sql($sql);
                                if ($res === false) {
                                    $res = [];
                                }
                            } catch (\Exception $e) {
                                // Unexistent agent.
                                if (is_metaconsole() === true
                                    && $node_int > 0
                                ) {
                                    $node->disconnect();
                                }

                                error_log('[events_get_all]'.$e->getMessage());
                                return __('Could not connect: %s', $e->getMessage());
                            } finally {
                                if (is_metaconsole() === true
                                    && $node_int > 0
                                ) {
                                    $node->disconnect();
                                }
                            }

                            return $res;
                        }
                    )
                );
            } catch (\Exception $e) {
                $e->getReasons();
            }
        }

        $data = [];
        $buffers = [
            'settings' => [
                'total' => $config['max_number_of_events_per_node'],
            ],
            'data'     => [],
            'error'    => [],
        ];

        if (empty($result_meta) === false) {
            foreach ($result_meta as $node => $value) {
                if (is_array($value) === false) {
                    $buffers['error'][$node] = $value;
                    $buffers['data'][$node] = 0;
                } else {
                    $buffers['data'][$node] = count($value);
                    if (empty($value) === false) {
                        foreach ($value as $k => $v) {
                            $value[$k]['server_id'] = $metaconsole_connections[$node];
                            $value[$k]['server_name'] = $node;
                        }

                        $data = array_merge($data, $value);
                    }
                }
            }
        }

        if (empty($filter['server_id']) === true) {
            if ($sort_field !== 'agent_name'
                && $sort_field !== 'server_name'
                && $sort_field !== 'timestamp'
            ) {
                $sort_field = explode('.', $sort_field)[1];
                if ($sort_field === 'user_comment') {
                    $sort_field = 'comments';
                }
            }

            usort(
                $data,
                function ($a, $b) use ($sort_field, $order) {
                    switch ($sort_field) {
                        default:
                        case 'utimestamp':
                        case 'criticity':
                        case 'estado':
                            if ($a[$sort_field] === $b[$sort_field]) {
                                $res = 0;
                            } else if ($a[$sort_field] > $b[$sort_field]) {
                                $res = ($order === 'asc') ? 1 : (-1);
                            } else {
                                $res = ($order === 'asc') ? (-1) : 1;
                            }
                        break;
                        case 'evento':
                        case 'agent_name':
                        case 'timestamp':
                        case 'tags':
                        case 'comments':
                        case 'server_name':
                            if ($order === 'asc') {
                                $res = strcasecmp($a[$sort_field], $b[$sort_field]);
                            } else {
                                $res = strcasecmp($b[$sort_field], $a[$sort_field]);
                            }
                        break;
                    }

                    return $res;
                }
            );

            if (isset($limit, $offset) === true
                && $limit !== 0
                && isset($filter['csv_all']) === false
            ) {
                $count = count($data);
                $end = ((int) $offset !== 0) ? ($offset + $limit) : $limit;
                $finally = array_slice($data, $offset, $end, true);
                $return = [
                    'buffers' => $buffers,
                    'data'    => $finally,
                    'total'   => $count,
                ];
            } else {
                $return = array_slice(
                    $data,
                    0,
                    ($config['max_number_of_events_per_node'] * count($metaconsole_connections)),
                    true
                );
            }

            return $return;
        } else {
            return $data;
        }
    }

    return db_get_all_rows_sql($sql);
}


/**
 * @deprecated Use events_get_all instead.
 *
 * Get all rows of events from the database, that
 * pass the filter, and can get only some fields.
 *
 * @param mixed $filter Filters elements. It can be an indexed array
 *                      (keys would be the field name and value the expected
 *                      value, and would be joined with an AND operator) or a
 *                      string, including any SQL clause (without the WHERE
 *                      keyword). Example:
 *                <code>
 *                Both are similars:
 *                db_get_all_rows_filter ('table', ['disabled', 0]);
 *                db_get_all_rows_filter ('table', 'disabled = 0');
 *                Both are similars:
 *                db_get_all_rows_filter (
 *                    'table',
 *                    [
 *                         'disabled' => 0,
 *                         'history_data' => 0
 *                    ],
 *                    'name',
 *                    'OR'
 *                );
 *                db_get_all_rows_filter (
 *                    'table',
 *                    'disabled = 0 OR history_data = 0', 'name'
 *                );
 *                </code>.
 * @param mixed $fields Fields of the table to retrieve. Can be an array or a
 *                      coma separated string. All fields are retrieved by
 *                      default.
 *
 * @return mixed False in case of error or invalid values passed.
 *               Affected rows otherwise
 */
function events_get_events($filter=false, $fields=false)
{
    if (isset($filter['criticity']) === true
        && (int) $filter['criticity'] === EVENT_CRIT_WARNING_OR_CRITICAL
    ) {
        $filter['criticity'] = [
            EVENT_CRIT_WARNING,
            EVENT_CRIT_CRITICAL,
        ];
    }

    return db_get_all_rows_filter('tevento', $filter, $fields);
}


/**
 * Get the event with the id pass as parameter.
 *
 * @param integer $id      Event id.
 * @param mixed   $fields  The fields to show or by default all with false.
 * @param boolean $meta    Metaconsole environment or not.
 * @param boolean $history Retrieve also historical data.
 *
 * @return mixed False in case of error or invalid values passed.
 *               Event row otherwise.
 */
function events_get_event($id, $fields=false, $meta=false, $history=false)
{
    if (empty($id) === true) {
        return false;
    }

    global $config;

    if (is_array($fields) === true) {
        if (in_array('id_grupo', $fields) === false) {
            $fields[] = 'id_grupo';
        }
    }

    $event = db_get_row('tevento', 'id_evento', $id, $fields);
    if ((bool) check_acl($config['id_user'], $event['id_grupo'], 'ER') === false) {
        return false;
    }

    return $event;
}


/**
 * Change the status of one or multiple events.
 *
 * @param mixed   $id_event   Event ID or array of events.
 * @param integer $new_status New status of the event.
 *
 * @return boolean Whether or not it was successful
 */
function events_change_status(
    $id_event,
    $new_status
) {
    global $config;

    // Cleans up the selection for all unwanted
    // values also casts any single values as an array.
    $id_event = (array) safe_int($id_event, 1);

    // Update ack info if the new status is validated.
    $ack_utimestamp = 0;
    $ack_user = $config['id_user'];
    if ((int) $new_status === EVENT_STATUS_VALIDATED) {
        $ack_utimestamp = time();
    }

    switch ($new_status) {
        case EVENT_STATUS_NEW:
            $status_string = 'New';
        break;

        case EVENT_STATUS_VALIDATED:
            $status_string = 'Validated';
        break;

        case EVENT_STATUS_INPROCESS:
            $status_string = 'In process';
        break;

        default:
            $status_string = '';
        break;
    }

    $alerts = [];

    foreach ($id_event as $k => $id) {
        $event_group = events_get_group($id);
        $event = events_get_event($id);
        if ($event['id_alert_am'] > 0
            && in_array($event['id_alert_am'], $alerts) === false
        ) {
            $alerts[] = $event['id_alert_am'];
        }

        if (check_acl($config['id_user'], $event_group, 'EW') == 0) {
            db_pandora_audit(
                AUDIT_LOG_ACL_VIOLATION,
                'Attempted updating event #'.$id
            );

            unset($id_event[$k]);
        }
    }

    if (empty($id_event) === true) {
        return false;
    }

    $values = [
        'estado'         => $new_status,
        'id_usuario'     => $ack_user,
        'ack_utimestamp' => $ack_utimestamp,
    ];

    $ret = db_process_sql_update(
        'tevento',
        $values,
        ['id_evento' => $id_event]
    );

    if (($ret === false) || ($ret === 0)) {
        return false;
    }

    if ($new_status === EVENT_STATUS_VALIDATED) {
        events_change_owner(
            $id_event,
            $config['id_user'],
            false
        );
    }

    events_comment(
        $id_event,
        '',
        'Change status to '.$status_string
    );

    // Put the alerts in standby or not depends the new status.
    if (empty($alerts) === false) {
        foreach ($alerts as $alert) {
            switch ($new_status) {
                case EVENT_NEW:
                case EVENT_VALIDATE:
                    alerts_agent_module_standby($alert, 0);
                break;

                case EVENT_PROCESS:
                    alerts_agent_module_standby($alert, 1);
                break;

                default:
                    // Ignore.
                break;
            }
        }
    }

    return true;
}


/**
 * Change the owner of an event if the event hasn't owner.
 *
 * @param mixed   $id_event  Event ID or array of events.
 * @param string  $new_owner Id_user of the new owner. If is false, the current
 *                           owner will be set, if empty, will be cleaned.
 * @param boolean $force     Flag to force the change or not (not force is
 *                           change only when it hasn't owner).
 *
 * @return boolean Whether or not it was successful.
 */
function events_change_owner(
    $id_event,
    $new_owner=false,
    $force=false
) {
    global $config;
    // Cleans up the selection for all unwanted values also casts any single
    // values as an array.
    $id_event = (array) safe_int($id_event, 1);

    foreach ($id_event as $k => $id) {
        $event_group = events_get_group($id);

        if (check_acl($config['id_user'], $event_group, 'EW') == 0) {
            db_pandora_audit(
                AUDIT_LOG_ACL_VIOLATION,
                'Attempted updating event #'.$id
            );
            unset($id_event[$k]);
        }
    }

    if (empty($id_event) === true) {
        return false;
    }

    if ($new_owner === false) {
        $new_owner = $config['id_user'];
    }

    // Only generate comment when is forced
    // (sometimes is owner changes when comment).
    if ($force === true) {
        events_comment(
            $id_event,
            '',
            'Change owner to '.$new_owner
        );
    }

    $values = ['owner_user' => $new_owner];

    $where = ['id_evento' => $id_event];

    // If not force, add to where if owner_user = ''.
    if ($force === false) {
        $where['owner_user'] = '';
    }

    $ret = db_process_sql_update(
        'tevento',
        $values,
        $where,
        'AND',
        false
    );

    if (($ret === false) || ($ret === 0)) {
        return false;
    }

    return true;
}


/**
 * Comment events in a transresponse
 *
 * @param mixed  $id_event Event ID or array of events.
 * @param string $comment  Comment to be registered.
 * @param string $action   Action performed with comment. By default just add
 *                         a comment.
 *
 * @return boolean Whether or not it was successful
 */
function events_comment(
    $id_event,
    $comment='',
    $action='Added comment'
) {
    global $config;
    // Cleans up the selection for all unwanted values also casts any single
    // values as an array.
    $id_event = (array) safe_int($id_event, 1);
    // Check ACL.
    foreach ($id_event as $k => $id) {
        $event_group = events_get_group($id);
        if (check_acl($config['id_user'], $event_group, 'EW') == 0) {
            db_pandora_audit(
                AUDIT_LOG_ACL_VIOLATION,
                'Attempted updating event #'.$id
            );

            unset($id_event[$k]);
        }
    }

    if (empty($id_event) === true) {
        return false;
    }

    // Get the current event comments.
    $first_event = $id_event;
    if (is_array($id_event) === true) {
        $first_event = reset($id_event);
    }

    $sql = sprintf(
        'SELECT user_comment
        FROM tevento
        WHERE id_evento = %d',
        $first_event
    );

    $event_comments = db_get_all_rows_sql($sql);
    $event_comments_array = [];

    if ($event_comments[0]['user_comment'] == '') {
        $comments_format = 'new';
    } else {
        // If comments are not stored in json, the format is old.
        $event_comments[0]['user_comment'] = str_replace(
            [
                "\n",
                '&#x0a;',
            ],
            '<br>',
            $event_comments[0]['user_comment']
        );
        $event_comments_array = json_decode($event_comments[0]['user_comment']);

        if (empty($event_comments_array) === true) {
            $comments_format = 'old';
        } else {
            $comments_format = 'new';
        }
    }

    switch ($comments_format) {
        case 'new':
            $comment_for_json['comment'] = io_safe_input($comment);
            $comment_for_json['action'] = $action;
            $comment_for_json['id_user'] = $config['id_user'];
            $comment_for_json['utimestamp'] = time();
            $comment_for_json['event_id'] = $first_event;

            $event_comments_array[] = $comment_for_json;

            $event_comments = io_json_mb_encode($event_comments_array);

            // Update comment.
            $ret = db_process_sql_update(
                'tevento',
                ['user_comment' => $event_comments],
                ['id_evento' => implode(',', $id_event)]
            );
        break;

        case 'old':
            // Give old ugly format to comment.
            // Change this method for aux table or json.
            $comment = str_replace(["\r\n", "\r", "\n"], '<br>', $comment);

            if ($comment !== '') {
                $commentbox = '<div class="comment_box">'.io_safe_input($comment).'</div>';
            } else {
                $commentbox = '';
            }

            // Don't translate 'by' word because if multiple users with
            // different languages make comments in the same console
            // will be a mess.
            $comment = '<b>-- '.$action.' by '.$config['id_user'].' ['.date($config['date_format']).'] --</b><br>'.$commentbox.'<br>';

            // Update comment.
            $sql_validation = sprintf(
                'UPDATE %s
                SET user_comment = concat("%s", user_comment)
                WHERE id_evento in (%s)',
                'tevento',
                $comment,
                implode(',', $id_event)
            );

            $ret = db_process_sql($sql_validation);
        break;

        default:
            // Ignore.
        break;
    }

    if (($ret === false) || ($ret === 0)) {
        return false;
    }

    return true;
}


/**
 * Get group id of an event.
 *
 * @param integer $id_event Event id.
 *
 * @return integer Group id of the given event.
 */
function events_get_group($id_event)
{
    return (int) db_get_value(
        'id_grupo',
        'tevento',
        'id_evento',
        (int) $id_event
    );
}


/**
 * Get description of an event.
 *
 * @param integer $id_event Event id.
 *
 * @return string Description of the given event.
 */
function events_get_description($id_event)
{
    return (string) db_get_value(
        'evento',
        'tevento',
        'id_evento',
        (int) $id_event
    );
}


/**
 * Insert a event in the event log system.
 *
 * @param integer $event                 Event.
 * @param integer $id_group              Id_group.
 * @param integer $id_agent              Id_agent.
 * @param integer $status                Status.
 * @param string  $id_user               Id_user.
 * @param string  $event_type            Event_type.
 * @param integer $priority              Priority.
 * @param integer $id_agent_module       Id_agent_module.
 * @param integer $id_aam                Id_aam.
 * @param string  $critical_instructions Critical_instructions.
 * @param string  $warning_instructions  Warning_instructions.
 * @param string  $unknown_instructions  Unknown_instructions.
 * @param boolean $source                Source.
 * @param string  $tags                  Tags.
 * @param string  $custom_data           Custom_data.
 * @param integer $server_id             Server_id.
 * @param string  $id_extra              Id_extra.
 *
 * @return integer Event id.
 */
function events_create_event(
    $event,
    $id_group,
    $id_agent,
    $status=0,
    $id_user='',
    $event_type='unknown',
    $priority=0,
    $id_agent_module=0,
    $id_aam=0,
    $critical_instructions='',
    $warning_instructions='',
    $unknown_instructions='',
    $source=false,
    $tags='',
    $custom_data='',
    $server_id=0,
    $id_extra=''
) {
    if ($source === false) {
        $source = get_product_name();
    }

    $values = [
        'id_agente'             => $id_agent,
        'id_usuario'            => $id_user,
        'id_grupo'              => $id_group,
        'estado'                => $status,
        'timestamp'             => date('Y-m-d H:i:s'),
        'evento'                => $event,
        'utimestamp'            => time(),
        'event_type'            => $event_type,
        'id_agentmodule'        => $id_agent_module,
        'id_alert_am'           => $id_aam,
        'criticity'             => $priority,
        'user_comment'          => '',
        'tags'                  => $tags,
        'source'                => $source,
        'id_extra'              => $id_extra,
        'critical_instructions' => $critical_instructions,
        'warning_instructions'  => $warning_instructions,
        'unknown_instructions'  => $unknown_instructions,
        'owner_user'            => '',
        'ack_utimestamp'        => 0,
        'custom_data'           => $custom_data,
        'data'                  => '',
        'module_status'         => 0,
    ];

    return (int) db_process_sql_insert('tevento', $values);
}


/**
 * Prints a small event table.
 *
 * @param string  $filter        SQL WHERE clause.
 * @param integer $limit         How many events to show.
 * @param integer $width         How wide the table should be.
 * @param boolean $return        Prints out HTML if false.
 * @param integer $agent_id      Agent id if is the table of one agent.
 *                               0 otherwise.
 * @param boolean $tactical_view Be shown in tactical view or not.
 *
 * @return string HTML with table element.
 */
function events_print_event_table(
    $filter='',
    $limit=10,
    $width=440,
    $return=false,
    $agent_id=0,
    $tactical_view=false
) {
    global $config;

    ui_require_css_file('events');

    if ($agent_id == 0) {
        $agent_condition = '';
    } else {
        $agent_condition = ' id_agente = '.$agent_id.' AND ';
    }

    if ($filter == '') {
        $filter = '1 = 1';
    }

    $secondary_join = 'LEFT JOIN tagent_secondary_group tasg ON tevento.id_agente = tasg.id_agent';

    $sql = sprintf(
        'SELECT DISTINCT tevento.*
		FROM tevento %s
		WHERE %s %s
		ORDER BY utimestamp DESC LIMIT %d',
        $secondary_join,
        $agent_condition,
        $filter,
        $limit
    );

    $result = db_get_all_rows_sql($sql);

    if ($result === false) {
        if ($return) {
            $returned = ui_print_info_message(__('No events'), '', true);
            return $returned;
        } else {
            echo ui_print_info_message(__('No events'));
        }
    } else {
        $table = new stdClass();
        $table->id = 'latest_events_table';
        $table->cellpadding = 0;
        $table->cellspacing = 0;
        $table->width = $width;
        $table->class = 'info_table no-td-padding';
        if (!$tactical_view) {
            $table->title = __('Latest events');
        }

        $table->titleclass = 'tabletitle';
        $table->titlestyle = 'text-transform:uppercase;';
        $table->headclass = [];
        $table->head = [];
        $table->rowclass = [];
        $table->cellclass = [];
        $table->data = [];
        $table->align = [];
        $table->style = [];

        $i = 0;
        $table->head[$i] = "<span title='".__('Severity')."'>".__('S.').'</span>';
        $table->headstyle[$i] = 'width: 1%;text-align: center;';
        $table->style[$i++] = 'text-align: center;';

        $table->head[$i] = __('Type');
        $table->headstyle[$i] = 'width: 3%;text-align: center;';
        $table->style[$i++] = 'text-align: center;';

        $table->head[$i] = __('Event name');
        $table->headstyle[$i] = '';
        $table->style[$i++] = 'word-break: break-word;';

        if ($agent_id == 0) {
            $table->head[$i] = __('Agent name');
            $table->headstyle[$i] = '';
            $table->style[$i++] = 'word-break: break-all;';
        }

        $table->head[$i] = __('Timestamp');
        $table->headstyle[$i] = 'width: 150px;';
        $table->style[$i++] = 'word-break: break-word;';

        $table->head[$i] = __('Status');
        $table->headstyle[$i] = 'width: 150px;text-align: center;';
        $table->style[$i++] = 'text-align: center;';

        $table->head[$i] = "<span title='".__('Validated')."'>".__('V.').'</span>';
        $table->headstyle[$i] = 'width: 1%;text-align: center;';
        $table->style[$i++] = 'text-align: center;';

        $all_groups = [];
        if ($agent_id != 0) {
            $all_groups = agents_get_all_groups_agent($agent_id);
        }

        foreach ($result as $event) {
            // Copy all groups of the agent and append the event group.
            $check_events = $all_groups;
            $check_events[] = $event['id_grupo'];
            if (! check_acl_one_of_groups($config['id_user'], $check_events, 'ER')) {
                continue;
            }

            $data = [];

            // Colored box.
            switch ($event['estado']) {
                case 0:
                    $img = 'images/star.png';
                    $title = __('New event');
                break;

                case 1:
                    $img = 'images/tick.png';
                    $title = __('Event validated');
                break;

                case 2:
                    $img = 'images/hourglass.png';
                    $title = __('Event in process');
                break;

                default:
                    // Ignore.
                break;
            }

            $i = 0;
            // Criticity.
            $data[$i++] = ui_print_event_priority($event['criticity'], true, true);

            // Event type.
            $data[$i++] = events_print_type_img($event['event_type'], true);

            // Event text.
            $data[$i++] = ui_print_string_substr(
                strip_tags(io_safe_output($event['evento'])),
                75,
                true,
                '7.5'
            );

            if ($agent_id == 0) {
                if ($event['id_agente'] > 0) {
                    // Agent name.
                    // Get class name, for the link color, etc.
                    $data[$i] = "<a href='index.php?sec=estado&sec2=operation/agentes/ver_agente&id_agente=".$event['id_agente']."'>".agents_get_alias($event['id_agente']).'</A>';
                    // For System or SNMP generated alerts.
                } else if ($event['event_type'] === 'system') {
                    $data[$i] = __('System');
                } else {
                    $data[$i] = '';
                }

                $i++;
            }

            // Timestamp.
            $data[$i++] = ui_print_timestamp($event['timestamp'], true, ['style' => 'font-size: 7.5pt; letter-spacing: 0.3pt;']);

            // Status.
            $data[$i++] = ui_print_event_type($event['event_type'], true);

            $data[$i++] = html_print_image(
                $img,
                true,
                [
                    'class' => 'image_status',
                    'title' => $title,
                ]
            );
            $table->data[] = $data;
        }

        $events_table = html_print_table($table, true);
        $out = $events_table;

        if (!$tactical_view) {
            $out .= '<table width="100%"><tr><td class="w90p align-top pdd_t_0px">';
            if ($agent_id != 0) {
                $out .= '</td><td class="w200px align-top">';
                $out .= '<table cellpadding=0 cellspacing=0 class="databox"><tr><td>';
                $out .= '<fieldset class="databox tactical_set">
						<legend>'.__('Events -by module-').'</legend>'.graph_event_module(180, 100, $event['id_agente']).'</fieldset>';
                $out .= '</td></tr></table>';
            } else {
                $out .= '</td><td class="w200px align-top">';
                $out .= '<table cellpadding=0 cellspacing=0 class="databox"><tr><td>';
                $out .= '<fieldset class="databox tactical_set">
						<legend>'.__('Event graph').'</legend>'.grafico_eventos_total('', 180, 60).'</fieldset>';
                $out .= '<fieldset class="databox tactical_set">
						<legend>'.__('Event graph by agent').'</legend>'.grafico_eventos_grupo(180, 60).'</fieldset>';
                $out .= '</td></tr></table>';
            }

            $out .= '</td></tr></table>';
        }

        unset($table);

        if ($return) {
            return $out;
        } else {
            echo $out;
        }
    }
}


/**
 * Prints the event type image.
 *
 * @param string  $type     Event type from SQL.
 * @param boolean $return   Whether to return or print.
 * @param boolean $only_url Flag to return only url of image, by default false.
 *
 * @return string HTML with img.
 */
function events_print_type_img(
    $type,
    $return=false,
    $only_url=false
) {
    global $config;

    $output = '';

    $urlImage = ui_get_full_url(false);

    $style = '';

    switch ($type) {
        case 'alert_recovered':
            $icon = 'images/bell.png';
            $style = 'invert_filter';
        break;

        case 'alert_manual_validation':
            $icon = 'images/ok.png';
            $style = 'invert_filter';
        break;

        case 'going_down_critical':
        case 'going_up_critical':
            // This is to be backwards compatible.
            $icon = 'images/module_critical.png';
        break;

        case 'going_up_normal':
        case 'going_down_normal':
            // This is to be backwards compatible.
            $icon = 'images/module_ok.png';
        break;

        case 'going_up_warning':
        case 'going_down_warning':
            $icon = 'images/module_warning.png';
        break;

        case 'going_unknown':
            $icon = 'images/module_unknown.png';
        break;

        case 'alert_fired':
            $icon = 'images/bell_error.png';
            $style = 'invert_filter';
        break;

        case 'system':
            $icon = 'images/cog.png';
            $style = 'invert_filter';
        break;

        case 'recon_host_detected':
            $icon = 'images/recon.png';
            $style = 'invert_filter';
        break;

        case 'new_agent':
            $icon = 'images/agent.png';
            $style = 'invert_filter';
        break;

        case 'configuration_change':
            $icon = 'images/config.png';
            $style = 'invert_filter';
        break;

        case 'unknown':
        default:
            $icon = 'images/lightning_go.png';
            $style = 'invert_filter';
        break;
    }

    if ($only_url) {
        $output = $urlImage.'/'.$icon;
    } else {
        $output .= html_print_image(
            $icon,
            true,
            [
                'title' => events_print_type_description($type, true),
                'class' => $style,
            ]
        );
    }

    if ($return) {
        return $output;
    }

    echo $output;
}


/**
 * Prints the event type description
 *
 * @param string  $type   Event type from SQL.
 * @param boolean $return Whether to return or print.
 *
 * @return string HTML with img
 */
function events_print_type_description($type, $return=false)
{
    $output = '';

    switch ($type) {
        case 'going_unknown':
            $output .= __('Going to unknown');
        break;

        case 'alert_recovered':
            $output .= __('Alert recovered');
        break;

        case 'alert_manual_validation':
            $output .= __('Alert manually validated');
        break;

        case 'going_up_warning':
            $output .= __('Going from critical to warning');
        break;

        case 'going_down_critical':
        case 'going_up_critical':
            // This is to be backwards compatible.
            $output .= __('Going up to critical state');
        break;

        case 'going_up_normal':
        case 'going_down_normal':
            // This is to be backwards compatible.
            $output .= __('Going up to normal state');
        break;

        case 'going_down_warning':
            $output .= __('Going down from normal to warning');
        break;

        case 'alert_fired':
            $output .= __('Alert fired');
        break;

        case 'system';
            $output .= __('SYSTEM');
        break;

        case 'recon_host_detected';
            $output .= __('Discovery server detected a new host');
        break;

        case 'new_agent';
            $output .= __('New agent created');
        break;

        case 'configuration_change';
            $output .= __('Configuration change');
        break;

        case 'alert_ceased';
            $output .= __('Alert ceased');
        break;

        case 'error';
            $output .= __('Error');
        break;

        case 'unknown':
        default:
            $output .= __('Unknown type:').': '.$type;
        break;
    }

    if ($return) {
        return $output;
    }

    echo $output;
}


/**
 * Get all the events happened in an Agent during a period of time.
 *
 * The returned events will be in the time interval ($date - $period, $date]
 *
 * @param integer $id_agent                    Agent id to get events.
 * @param integer $period                      Period in seconds to get events.
 * @param integer $date                        Beginning date to get events.
 * @param boolean $history                     History.
 * @param boolean $show_summary_group          Show_summary_group.
 * @param array   $filter_event_severity       Filter_event_severity.
 * @param array   $filter_event_type           Filter_event_type.
 * @param array   $filter_event_status         Filter_event_status.
 * @param string  $filter_event_filter_search  Filter_event_filter_search.
 * @param boolean $id_group                    Id_group.
 * @param boolean $events_group                Events_group.
 * @param boolean $id_agent_module             Id_agent_module.
 * @param boolean $events_module               Events_module.
 * @param boolean $id_server                   Id_server.
 * @param boolean $filter_event_filter_exclude Filter_event_filter_exclude.
 *
 * @return array|false An array with all the events happened. False if something
 *                     failed.
 */
function events_get_agent(
    $id_agent,
    $period,
    $date=0,
    $history=false,
    $show_summary_group=false,
    $filter_event_severity=[],
    $filter_event_type=[],
    $filter_event_status=[],
    $filter_event_filter_search='',
    $id_group=false,
    $events_group=false,
    $id_agent_module=false,
    $events_module=false,
    $id_server=false,
    $filter_event_filter_exclude=false
) {
    global $config;

    $filters = [];
    // Id Agent.
    if ($id_agent !== false && empty($id_agent) === false) {
        $filters['id_agent'] = $id_agent;
    }

    // Date.
    if (is_numeric($date) === false) {
        $date = time_w_fixed_tz($date);
    }

    if (empty($date) === true) {
        $date = get_system_time();
    }

    $datelimit = ($date - $period);
    $filters['date_from'] = date('Y-m-d', $datelimit);
    $filters['date_to'] = date('Y-m-d', $date);
    $filters['time_from'] = date('H:i:s', $datelimit);
    $filters['time_to'] = date('H:i:s', $date);

    // Severity.
    if (empty($filter_event_severity) === false) {
        $filters['severity'] = $filter_event_severity;
    }

    // Type.
    if (empty($filter_event_type) === false) {
        $filters['event_type'] = $filter_event_type;
    }

    // Status.
    if (empty($filter_event_status) === false) {
        $filters['status'] = $filter_event_status;
    }

    // ID group.
    if (empty($id_group) === false) {
        $filters['id_group_filter'] = $id_group;
    }

    // Filter search.
    if (empty($filter_event_filter_search) === false) {
        $filters['search'] = $filter_event_filter_search;
    }

    // Filter search exclude.
    if (empty($filter_event_filter_exclude) === false) {
        $filters['search_exclude'] = $filter_event_filter_exclude;
    }

    if (empty($id_agent_module) === false) {
        $filters['module_search'] = modules_get_agentmodule_name($id_agent_module);
    }

    if (empty($id_server) === false) {
        $filters['id_server'] = $id_server;
    }

    // Group by agent.
    if ((bool) $show_summary_group === true) {
        $filters['group_rep'] = 1;
    } else {
        $filters['group_rep'] = 2;
    }

    $events = Event::search(
        [
            'te.*',
            'ta.alias',
        ],
        $filters,
        0,
        1000,
        'desc',
        'te.utimestamp'
    );

    if (is_metaconsole() === true) {
        $events = $events['data'];
    }

    return $events;
}


/**
 * Decode a numeric type into type description.
 *
 * @param integer $type_id Numeric type.
 *
 * @return string Type description.
 */
function events_get_event_types($type_id)
{
    $diferent_types = get_event_types();

    $type_desc = '';
    switch ($type_id) {
        case 'unknown':
            $type_desc = __('Unknown');
        break;

        case 'critical':
            $type_desc = __('Monitor Critical');
        break;

        case 'warning':
            $type_desc = __('Monitor Warning');
        break;

        case 'normal':
            $type_desc = __('Monitor Normal');
        break;

        case 'alert_fired':
            $type_desc = __('Alert fired');
        break;

        case 'alert_recovered':
            $type_desc = __('Alert recovered');
        break;

        case 'alert_ceased':
            $type_desc = __('Alert ceased');
        break;

        case 'alert_manual_validation':
            $type_desc = __('Alert manual validation');
        break;

        case 'recon_host_detected':
            $type_desc = __('Recon host detected');
        break;

        case 'system':
            $type_desc = __('System');
        break;

        case 'error':
            $type_desc = __('Error');
        break;

        case 'configuration_change':
            $type_desc = __('Configuration change');
        break;

        case 'not_normal':
            $type_desc = __('Not normal');
        break;

        case 'ncm':
            $type_desc = __('Network configuration manager');
        break;

        default:
            if (isset($config['text_char_long'])) {
                foreach ($diferent_types as $key => $type) {
                    if ($key == $type_id) {
                        $type_desc = ui_print_truncate_text($type, $config['text_char_long'], false, true, false);
                    }
                }
            }
        break;
    }

    return $type_desc;
}


/**
 * Decode a numeric severity into severity description.
 *
 * @param integer $severity_id Numeric severity.
 *
 * @return string Severity description.
 */
function events_get_severity_types($severity_id)
{
    $diferent_types = get_priorities();

    $severity_desc = '';
    switch ($severity_id) {
        case EVENT_CRIT_MAINTENANCE:
            $severity_desc = __('Maintenance');
        break;

        case EVENT_CRIT_INFORMATIONAL:
            $severity_desc = __('Informational');
        break;

        case EVENT_CRIT_NORMAL:
            $severity_desc = __('Normal');
        break;

        case EVENT_CRIT_WARNING:
            $severity_desc = __('Warning');
        break;

        case EVENT_CRIT_CRITICAL:
            $severity_desc = __('Critical');
        break;

        default:
            if (isset($config['text_char_long'])) {
                foreach ($diferent_types as $key => $type) {
                    if ($key == $severity_id) {
                        $severity_desc = ui_print_truncate_text(
                            $type,
                            $config['text_char_long'],
                            false,
                            true,
                            false
                        );
                    }
                }
            }
        break;
    }

    return $severity_desc;
}


/**
 * Return all descriptions of event status.
 *
 * @param boolean $report Show in report or not.
 *
 * @return array Status description array.
 */
function events_get_all_status($report=false)
{
    $fields = [];
    if (!$report) {
        $fields[-1] = __('All event');
        $fields[0]  = __('Only new');
        $fields[1]  = __('Only validated');
        $fields[2]  = __('Only in process');
        $fields[3]  = __('Only not validated');
    } else {
        $fields[-1] = __('All event');
        $fields[0]  = __('New');
        $fields[1]  = __('Validated');
        $fields[2]  = __('In process');
        $fields[3]  = __('Not Validated');
    }

    return $fields;
}


/**
 * Decode a numeric status into status description.
 *
 * @param integer $status_id Numeric status.
 *
 * @return string Status description.
 */
function events_get_status($status_id)
{
    switch ($status_id) {
        case -1:
            $status_desc = __('All event');
        break;

        case 0:
            $status_desc = __('Only new');
        break;

        case 1:
            $status_desc = __('Only validated');
        break;

        case 2:
            $status_desc = __('Only in process');
        break;

        case 3:
            $status_desc = __('Only not validated');
        break;

        default:
            // Ignore.
        break;
    }

    return $status_desc;
}


/**
 * Checks if a user has permissions to see an event filter.
 *
 * @param integer $id_filter Id of the event filter.
 *
 * @return boolean True if the user has permissions or false otherwise.
 */
function events_check_event_filter_group($id_filter, $restrict_all_group=false)
{
    global $config;

    $id_group = db_get_value('id_group_filter', 'tevent_filter', 'id_filter', $id_filter);
    $own_info = get_user_info($config['id_user']);
    // Get group list that user has access.
    $groups_user = users_get_groups($config['id_user'], 'EW', $own_info['is_admin'], true);

    // Permissions in any group allow to edit "All group" filters.
    if ($id_group == 0 && !empty($groups_user)) {
        if ($restrict_all_group === true) {
            return false;
        } else {
            return true;
        }
    }

    $groups_id = [];
    $has_permission = false;

    foreach ($groups_user as $key => $groups) {
        if ($groups['id_grupo'] == $id_group) {
            return true;
        }
    }

    return false;
}


/**
 *  Get a event filter.
 *
 * @param integer $id_filter Filter id to be fetched.
 * @param array   $filter    Extra filter.
 * @param array   $fields    Fields to be fetched.
 *
 * @return array A event filter matching id and filter or false.
 */
function events_get_event_filter($id_filter, $filter=false, $fields=false)
{
    if (empty($id_filter)) {
        return false;
    }

    if (! is_array($filter)) {
        $filter = [];
        $filter['id_filter'] = (int) $id_filter;
    }

    return db_get_row_filter('tevent_filter', $filter, $fields);
}


/**
 *  Get a event filters in select format.
 *
 * @param boolean $manage If event filters are used for manage/view operations
 *                        (non admin users can see group ALL for manage) # Fix.
 *
 * @return array A event filter matching id and filter or false.
 */
function events_get_event_filter_select($manage=true)
{
    global $config;

    $strict_acl = db_get_value('strict_acl', 'tusuario', 'id_user', $config['id_user']);

    if ($strict_acl) {
        $user_groups = users_get_strict_mode_groups(
            $config['id_user'],
            users_can_manage_group_all()
        );
    } else {
        $user_groups = users_get_groups(
            $config['id_user'],
            'ER',
            users_can_manage_group_all(),
            true
        );
    }

    if (empty($user_groups)) {
        return [];
    }

    $sql = '
		SELECT id_filter, id_name
		FROM tevent_filter
		WHERE id_group_filter IN (0, '.implode(',', array_keys($user_groups)).')';

    $event_filters = db_get_all_rows_sql($sql);

    if ($event_filters === false) {
        return [];
    } else {
        $result = [];
        foreach ($event_filters as $event_filter) {
            $result[$event_filter['id_filter']] = $event_filter['id_name'];
        }
    }

    return $result;
}


/**
 * Events pages functions to load modal window with advanced view of an event.
 * Called from include/ajax/events.php.
 *
 * @param mixed $event Event.
 *
 * @return string HTML.
 */
function events_page_responses($event)
{
    global $config;
    $table_responses = new StdClass();
    $table_responses->cellspacing = 2;
    $table_responses->cellpadding = 2;
    $table_responses->id = 'responses_table';
    $table_responses->width = '100%';
    $table_responses->data = [];
    $table_responses->head = [];
    $table_responses->style[0] = 'height:30px';
    $table_responses->style[2] = 'text-align:right;';
    $table_responses->class = 'table_modal_alternate';

    $acl_tags_event_manager = tags_checks_event_acl(
        $config['id_user'],
        $event['id_grupo'],
        'EM',
        $event['clean_tags']
    );

    if ($acl_tags_event_manager === true) {
        // Owner.
        $data = [];
        $data[0] = __('Change owner');
        // Owner change can be done to users that belong to the event group
        // with ER permission.
        $profiles_view_events = db_get_all_rows_filter(
            'tperfil',
            ['event_view' => '1'],
            'id_perfil'
        );

        foreach ($profiles_view_events as $k => $v) {
            $profiles_view_events[$k] = reset($v);
        }

        $_user_groups = array_keys(
            users_get_groups(
                $config['id_user'],
                'ER',
                users_can_manage_group_all()
            )
        );
        $users = groups_get_users(
            $_user_groups,
            ['id_perfil' => $profiles_view_events],
            true
        );

        foreach ($users as $u) {
            $owners[$u['id_user']] = $u['id_user'];
        }

        if (empty($event['owner_user']) === true) {
            $owner_name = __('None');
        } else {
            $owner_name = db_get_value(
                'id_user',
                'tusuario',
                'id_user',
                $event['owner_user']
            );
            $owners[$event['owner_user']] = $owner_name;
        }

        $data[1] = html_print_select(
            $owners,
            'id_owner',
            $event['owner_user'],
            '',
            __('None'),
            -1,
            true,
            false,
            true,
            '',
            false,
            'width: 70%'
        );

        $data[2] = html_print_button(
            __('Update'),
            'owner_button',
            false,
            'event_change_owner('.$event['id_evento'].', '.$event['server_id'].');',
            'class="sub next w70p"',
            true
        );

        $table_responses->data[] = $data;
    }

    // Status.
    $data = [];
    $data[0] = __('Change status');

    $status_blocked = false;

    if (tags_checks_event_acl(
        $config['id_user'],
        $event['id_grupo'],
        'EM',
        $event['clean_tags']
    )
    ) {
        // If the user has manager acls, the status can be changed to all
        // possibilities always.
        $status = [
            0 => __('New'),
            2 => __('In process'),
            1 => __('Validated'),
        ];
    } else {
        switch ($event['estado']) {
            case 0:
                // If the user hasnt manager acls and the event is new.
                // The status can be changed.
                $status = [
                    2 => __('In process'),
                    1 => __('Validated'),
                ];
            break;

            case 1:
                // If the user hasnt manager acls and the event is validated.
                // The status cannot be changed.
                $status = [1 => __('Validated')];
                $status_blocked = true;
            break;

            case 2:
                // If the user hasnt manager acls and the event is in process.
                // The status only can be changed to validated.
                $status = [1 => __('Validated')];
            break;

            default:
                // Ignored.
            break;
        }
    }

    // The change status option will be enabled only when is possible change
    // the status.
    $data[1] = html_print_select(
        $status,
        'estado',
        $event['estado'],
        '',
        '',
        0,
        true,
        false,
        false,
        '',
        $status_blocked
    );

    if ($status_blocked === false) {
        $data[2] = html_print_button(
            __('Update'),
            'status_button',
            false,
            'event_change_status(\''.$event['similar_ids'].'\','.$event['server_id'].');',
            'class="sub next w70p"',
            true
        );
    }

    if ((tags_checks_event_acl(
        $config['id_user'],
        $event['id_grupo'],
        'EM',
        $event['clean_tags']
    )) || (tags_checks_event_acl(
        $config['id_user'],
        $event['id_grupo'],
        'EW',
        $event['clean_tags']
    ))
    ) {
        $table_responses->data[] = $data;

        // Comments.
        $data = [];
        $data[0] = __('Comment');
        $data[1] = '';
        $data[2] = html_print_button(
            __('Add comment'),
            'comment_button',
            false,
            '$(\'#link_comments\').trigger(\'click\');',
            'class="sub next w70p"',
            true
        );

        $table_responses->data[] = $data;
    }

    if (tags_checks_event_acl(
        $config['id_user'],
        $event['id_grupo'],
        'EM',
        $event['clean_tags']
    )
    ) {
        // Delete.
        $data = [];
        $data[0] = __('Delete event');
        $data[1] = '';
        $data[2] = '<form id="event_responses_delete" method="post">';
        $data[2] .= html_print_button(
            __('Delete event'),
            'delete_button',
            false,
            'if(!confirm(\''.__('Are you sure?').'\')) { return false; } this.form.submit();',
            'class="sub cancel w70p"',
            true
        );
        $data[2] .= html_print_input_hidden('delete', 1, true);
        $data[2] .= html_print_input_hidden(
            'validate_ids',
            $event['id_evento'],
            true
        );
        $data[2] .= '</form>';

        $table_responses->data[] = $data;
    }

    // Custom responses.
    $data = [];
    $data[0] = __('Custom responses');

    $id_groups = array_keys(users_get_groups(false, 'EW'));
    $event_responses = db_get_all_rows_filter(
        'tevent_response',
        ['id_group' => $id_groups]
    );

    if (empty($event_responses) || (!check_acl($config['id_user'], 0, 'EW') && !check_acl($config['id_user'], 0, 'EM'))) {
        $data[1] = '<i>'.__('N/A').'</i>';
    } else {
        $responses = [];
        foreach ($event_responses as $v) {
            $responses[$v['id']] = $v['name'];
        }

        $data[1] = html_print_select(
            $responses,
            'select_custom_response',
            '',
            '',
            '',
            '',
            true,
            false,
            false
        );

        if (isset($event['server_id'])) {
            $server_id = $event['server_id'];
        } else {
            $server_id = 0;
        }

        $data[2] = html_print_button(
            __('Execute'),
            'custom_response_button',
            false,
            'execute_response('.$event['id_evento'].','.$server_id.')',
            "class='sub next w70p'",
            true
        );
    }

    $table_responses->data[] = $data;

    $responses_js = "<script>
			$('#select_custom_response').change(function() {
				var id_response = $('#select_custom_response').val();
				var params = get_response_params(id_response);
				var description = get_response_description(id_response);
				$('.params_rows').remove();
				$('#responses_table')
					.append('<tr class=\"params_rows\"><td>".__('Description')."</td><td class=\"height_30px\" colspan=\"2\">'+description+'</td></tr>');

				if (params.length == 1 && params[0] == '') {
					return;
				}

				$('#responses_table')
					.append('<tr class=\"params_rows\"><td class=\"left pdd_l_20px height_30px\" colspan=\"3\">".__('Parameters')."</td></tr>');

				for (i = 0; i < params.length; i++) {
					add_row_param('responses_table',params[i]);
				}
			});
			$('#select_custom_response').trigger('change');
			</script>";

    $responses = '<div id="extended_event_responses_page" class="extended_event_pages">'.html_print_table($table_responses, true).$responses_js.'</div>';

    return $responses;
}


/**
 * Replace macros in the target of a response and return it.
 *
 * @param integer $event_id    Event identifier.
 * @param integer $response_id Event response identifier.
 *
 * @return string The response text with the macros applied.
 */
function events_get_response_target(
    int $event_id,
    int $response_id
) {
    global $config;

    include_once $config['homedir'].'/vendor/autoload.php';

    try {
        $eventObjt = new PandoraFMS\Event($event_id);
    } catch (Exception $e) {
        $eventObjt = new PandoraFMS\Event();
    }

    $event = db_get_row('tevento', 'id_evento', $event_id);
    $event_response = db_get_row('tevent_response', 'id', $response_id);
    $target = io_safe_output($event_response['target']);

    if (strpos($target, '_agent_alias_') !== false) {
        $agente_table_name = 'tagente';
        $filter = ['id_agente' => $event['id_agente']];
        $alias = db_get_value_filter('alias', $agente_table_name, $filter);
        $target = str_replace('_agent_alias_', io_safe_output($alias), $target);
    }

    if (strpos($target, '_agent_name_') !== false) {
        $agente_table_name = 'tagente';
        $filter = ['id_agente' => $event['id_agente']];
        $name = db_get_value_filter('nombre', $agente_table_name, $filter);
        $target = str_replace('_agent_name_', io_safe_output($name), $target);
    }

    // Substitute each macro.
    if (strpos($target, '_agent_address_') !== false) {
        $agente_table_name = 'tagente';
        $filter = ['id_agente' => $event['id_agente']];
        $ip = db_get_value_filter('direccion', $agente_table_name, $filter);
        // If agent has not an IP, display N/A.
        if ($ip === false || $ip === '') {
            $ip = __('N/A');
        }

        $target = str_replace('_agent_address_', $ip, $target);
    }

    if (strpos($target, '_agent_id_') !== false) {
        $target = str_replace('_agent_id_', $event['id_agente'], $target);
    }

    if ((strpos($target, '_module_address_') !== false)
        || (strpos($target, '_module_name_') !== false)
    ) {
        if ($event['id_agentmodule'] !== 0) {
            $module = db_get_row(
                'tagente_modulo',
                'id_agente_modulo',
                $event['id_agentmodule']
            );
            if (empty($module['ip_target']) === true) {
                $module['ip_target'] = __('N/A');
            }

            $target = str_replace(
                '_module_address_',
                $module['ip_target'],
                $target
            );
            if (empty($module['nombre']) === true) {
                $module['nombre'] = __('N/A');
            }

            $target = str_replace(
                '_module_name_',
                io_safe_output($module['nombre']),
                $target
            );
        } else {
            $target = str_replace('_module_address_', __('N/A'), $target);
            $target = str_replace('_module_name_', __('N/A'), $target);
        }
    }

    if (strpos($target, '_event_id_') !== false) {
        $target = str_replace('_event_id_', $event['id_evento'], $target);
    }

    if (strpos($target, '_user_id_') !== false) {
        if (empty($event['id_usuario']) === false) {
            $target = str_replace('_user_id_', $event['id_usuario'], $target);
        } else {
            $target = str_replace('_user_id_', __('N/A'), $target);
        }
    }

    if (strpos($target, '_group_id_') !== false) {
        $target = str_replace('_group_id_', $event['id_grupo'], $target);
    }

    if (strpos($target, '_group_name_') !== false) {
        $target = str_replace(
            '_group_name_',
            io_safe_output(groups_get_name($event['id_grupo'], true)),
            $target
        );
    }

    if (strpos($target, '_event_utimestamp_') !== false) {
        $target = str_replace(
            '_event_utimestamp_',
            $event['utimestamp'],
            $target
        );
    }

    if (strpos($target, '_event_date_') !== false) {
        $target = str_replace(
            '_event_date_',
            io_safe_output(date($config['date_format'], $event['utimestamp'])),
            $target
        );
    }

    if (strpos($target, '_event_text_') !== false) {
        $target = str_replace(
            '_event_text_',
            events_display_name($event['evento']),
            $target
        );
    }

    if (strpos($target, '_event_type_') !== false) {
        $target = str_replace(
            '_event_type_',
            events_print_type_description($event['event_type'], true),
            $target
        );
    }

    if (strpos($target, '_alert_id_') !== false) {
        $target = str_replace(
            '_alert_id_',
            (empty($event['id_alert_am']) === true) ? __('N/A') : $event['id_alert_am'],
            $target
        );
    }

    if (strpos($target, '_event_severity_id_') !== false) {
        $target = str_replace(
            '_event_severity_id_',
            $event['criticity'],
            $target
        );
    }

    if (strpos($target, '_event_severity_text_') !== false) {
        $target = str_replace(
            '_event_severity_text_',
            get_priority_name($event['criticity']),
            $target
        );
    }

    if (strpos($target, '_module_id_') !== false) {
        $target = str_replace('_module_id_', $event['id_agentmodule'], $target);
    }

    if (strpos($target, '_event_tags_') !== false) {
        $target = str_replace('_event_tags_', $event['tags'], $target);
    }

    if (strpos($target, '_event_extra_id_') !== false) {
        if (empty($event['id_extra']) === true) {
            $target = str_replace(
                '_event_extra_id_',
                __('N/A'),
                $target
            );
        } else {
            $target = str_replace(
                '_event_extra_id_',
                $event['id_extra'],
                $target
            );
        }
    }

    if (strpos($target, '_event_source_') !== false) {
        $target = str_replace(
            '_event_source_',
            $event['source'],
            $target
        );
    }

    if (strpos($target, '_event_instruction_') !== false) {
        // Fallback to module instructions if not defined in event.
        $instructions = [];

        foreach ([
            'warning_instructions',
            'critical_instructions',
            'unknown_instructions',
        ] as $i) {
            $instructions[$i] = $event[$i];
            if (empty($instructions[$i]) === true
                && $eventObjt->module() !== null
            ) {
                try {
                    $instructions[$i] = $eventObjt->module()->{$i}();
                } catch (Exception $e) {
                    // Method not found.
                    $instructions[$i] = null;
                }
            }
        }

        $target = str_replace(
            '_event_instruction_',
            events_display_instructions(
                $event['event_type'],
                $instructions,
                false,
                $eventObjt->toArray()
            ),
            $target
        );
    }

    if (strpos($target, '_data_') !== false
        && $eventObjt !== null
        && $eventObjt->module() !== null
    ) {
        $target = str_replace(
            '_data_',
            $eventObjt->module()->lastValue(),
            $target
        );
    } else {
        $target = str_replace(
            '_data_',
            __('N/A'),
            $target
        );
    }

    if (strpos($target, '_moduledescription_') !== false
        && $eventObjt !== null
        && $eventObjt->module() !== null
    ) {
        $target = str_replace(
            '_moduledescription_',
            io_safe_output($eventObjt->module()->descripcion()),
            $target
        );
    } else {
        $target = str_replace(
            '_moduledescription_',
            __('N/A'),
            $target
        );
    }

    if (strpos($target, '_owner_user_') !== false) {
        if (empty($event['owner_user']) === true) {
            $target = str_replace('_owner_user_', __('N/A'), $target);
        } else {
            $target = str_replace('_owner_user_', $event['owner_user'], $target);
        }
    }

    if (strpos($target, '_event_status_') !== false) {
        $event_st = events_display_status($event['estado']);
        $target = str_replace('_event_status_', $event_st['title'], $target);
    }

    if (strpos($target, '_group_custom_id_') !== false) {
        $group_custom_id = db_get_value_sql(
            sprintf(
                'SELECT custom_id FROM tgrupo WHERE id_grupo=%s',
                $event['id_grupo']
            )
        );
        $event_st = events_display_status($event['estado']);
        $target = str_replace('_group_custom_id_', $group_custom_id, $target);
    }

    // Parse the event custom data.
    if (empty($event['custom_data']) === false) {
        $custom_data = json_decode($event['custom_data']);
        foreach ($custom_data as $key => $value) {
            $target = str_replace('_customdata_'.$key.'_', $value, $target);
        }

        if (strpos($target, '_customdata_json_') !== false) {
            $target = str_replace('_customdata_json_', json_encode($custom_data), $target);
        }

        if (strpos($target, '_customdata_text_') !== false) {
            $text = '';
            foreach ($custom_data as $key => $value) {
                $text .= $key.': '.$value.PHP_EOL;
            }

            $target = str_replace('_customdata_text_', $text, $target);
        }
    }

    // This will replace the macro with the current logged user.
    if (strpos($target, '_current_user_') !== false) {
        $target = str_replace('_current_user_', $config['id_user'], $target);
    }

    // This will replace the macro with the command timeout value.
    if (strpos($target, '_command_timeout_') !== false) {
        $target = str_replace(
            '_command_timeout_',
            $event_response['command_timeout'],
            $target
        );
    }

    if (strpos($target, '_owner_username_') !== false) {
        if (empty($event['owner_user']) === false) {
            $fullname = users_get_user_by_id($event['owner_user']);
            $target = str_replace(
                '_owner_username_',
                io_safe_output($fullname['fullname']),
                $target
            );
        } else {
            $target = str_replace('_owner_username_', __('N/A'), $target);
        }
    }

    if (strpos($target, '_current_username_') !== false) {
        $fullname = users_get_user_by_id($config['id_user']);
        $target = str_replace(
            '_current_username_',
            io_safe_output($fullname['fullname']),
            $target
        );
    }

    return $target;
}


/**
 * Generates 'custom field' page for event viewer.
 *
 * @param array $event Event to be displayed.
 *
 * @return string HTML.
 */
function events_page_custom_fields($event)
{
    global $config;

    // Custom fields.
    $table = new stdClass;
    $table->cellspacing = 2;
    $table->cellpadding = 2;
    $table->width = '100%';
    $table->data = [];
    $table->head = [];
    $table->class = 'table_modal_alternate';

    $all_customs_fields = (bool) check_acl(
        $config['id_user'],
        $event['id_grupo'],
        'AW'
    );

    if ($all_customs_fields) {
        $fields = db_get_all_rows_filter('tagent_custom_fields');
    } else {
        $fields = db_get_all_rows_filter(
            'tagent_custom_fields',
            ['display_on_front' => 1]
        );
    }

    if ($event['id_agente'] == 0) {
        $fields_data = [];
    } else {
        $fields_data = db_get_all_rows_filter('tagent_custom_data', ['id_agent' => $event['id_agente']]);
        if (is_array($fields_data)) {
            $fields_data_aux = [];
            foreach ($fields_data as $fd) {
                $fields_data_aux[$fd['id_field']] = $fd['description'];
            }

            $fields_data = $fields_data_aux;
        }
    }

    foreach ($fields as $field) {
        // Owner.
        $data = [];
        $data[0] = $field['name'];

        if (empty($fields_data[$field['id_field']])) {
            $data[1] = '<i>'.__('N/A').'</i>';
        } else {
            if ($field['is_password_type']) {
                $data[1] = '&bull;&bull;&bull;&bull;&bull;&bull;&bull;&bull;';
            } else {
                $data[1] = ui_bbcode_to_html($fields_data[$field['id_field']]);
            }
        }

        $field['id_field'];

        $table->data[] = $data;
    }

    $custom_fields = '<div id="extended_event_custom_fields_page" class="extended_event_pages">'.html_print_table($table, true).'</div>';

    return $custom_fields;
}


/**
 * Retrieves extended information of given event.
 *
 * @param integer $id_evento Target event.
 *
 * @return mixed array Of extended events or false if error.
 */
function events_get_extended_events(int $id_evento)
{
    return db_get_all_rows_sql(
        sprintf(
            'SELECT * FROM tevent_extended
            WHERE id_evento=%d ORDER BY utimestamp DESC',
            $id_evento
        )
    );

}


/**
 * Return if event has extended info or not.
 *
 * @param integer $id_event Target event.
 *
 * @return boolean Has extended info or not
 */
function events_has_extended_info(int $id_event)
{
    return (bool) db_get_value_sql(
        sprintf(
            'SELECT count(*) as "n" FROM (
                SELECT *
                FROM tevent_extended WHERE id_evento=%d LIMIT 1) t',
            $id_event
        )
    );
}


/**
 * Generates the 'related' page in event view.
 *
 * @param array  $event  To be displayed.
 * @param string $server Server (if in metaconsole environment).
 *
 * @return string HTML to be displayed.
 */
function events_page_related($event, $server='')
{
    $html = '<div id="extended_event_related_page" class="extended_event_pages">';
    $html .= '<h4>'.__('Extended information').'</h4>';
    $html .= '<div id="related_data"><p>'.__('Loading').'...</p></div>';
    $html .= '</div>';

    return $html;
}


/**
 * Generates the 'details' page in event view.
 *
 * @param array   $event  To be displayed.
 * @param integer $server Server (if in metaconsole environment).
 *
 * @return string HTML to be displayed.
 */
function events_page_details($event, $server_id=0)
{
    global $img_sev;
    global $config;

    // If metaconsole switch to node to get details and custom fields.
    $hashstring = '';
    $serverstring = '';
    if (is_metaconsole() === true && empty($server_id) === false) {
        $server = metaconsole_get_connection_by_id($server_id);
        $hashdata = metaconsole_get_server_hashdata($server);
        $hashstring = '&amp;loginhash=auto&loginhash_data='.$hashdata.'&loginhash_user='.str_rot13($config['id_user']);
        $serverstring = $server['server_url'].'/';

        if (metaconsole_connect($server) !== NOERR) {
            return ui_print_error_message(__('There was an error connecting to the node'), '', true);
        }
    }

    $table_class = 'table_modal_alternate';

    // Details.
    $table_details = new stdClass;
    $table_details->width = '100%';
    $table_details->data = [];
    $table_details->head = [];
    $table_details->cellspacing = 0;
    $table_details->cellpadding = 0;
    $table_details->class = $table_class;

    if ($event['id_agente'] != 0) {
        $agent = db_get_row('tagente', 'id_agente', $event['id_agente']);
    } else {
        $agent = [];
    }

    $data[0] = __('Agent details');
    $data[1] = empty($agent) ? '<i>'.__('N/A').'</i>' : '';
    $table_details->data[] = $data;

    if (empty($agent) === false) {
        $data = [];
        $data[0] = '<div class="normal_weight mrgn_lft_20px">'.__('Name').'</div>';
        if (can_user_access_node() && is_metaconsole() && empty($event['server_id']) === true) {
            $data[1] = ui_print_truncate_text(
                $agent['alias'],
                'agent_medium',
                true,
                true,
                true
            ).ui_print_help_tip(__('This agent belongs to metaconsole, is not possible display it'), true);
        } else if (can_user_access_node()) {
            $data[1] = ui_print_agent_name(
                $event['id_agente'],
                true,
                'agent_medium',
                '',
                false,
                $serverstring,
                $hashstring,
                $agent['alias']
            );
        } else {
            $data[1] = ui_print_truncate_text(
                $agent['alias'],
                'agent_medium',
                true,
                true,
                true
            );
        }

        $table_details->data[] = $data;

        $data = [];
        $data[0] = '<div class="normal_weight mrgn_lft_20px">'.__('IP Address').'</div>';
        $data[1] = empty($agent['direccion']) ? '<i>'.__('N/A').'</i>' : $agent['direccion'];
        $table_details->data[] = $data;

        $data = [];
        $data[0] = '<div class="normal_weight mrgn_lft_20px">'.__('OS').'</div>';
        $data[1] = ui_print_os_icon($agent['id_os'], true, true);
        if (empty($agent['os_version']) === false) {
            $data[1] .= ' ('.$agent['os_version'].')';
        }

        $table_details->data[] = $data;

        $data = [];
        $data[0] = '<div class="normal_weight mrgn_lft_20px">'.__('Last contact').'</div>';
        $data[1] = ($agent['ultimo_contacto'] == '1970-01-01 00:00:00') ? '<i>'.__('N/A').'</i>' : ui_print_timestamp($agent['ultimo_contacto'], true);
        $table_details->data[] = $data;

        $data = [];
        $data[0] = '<div class="normal_weight mrgn_lft_20px">'.__('Last remote contact').'</div>';
        $data[1] = ($agent['ultimo_contacto_remoto'] == '1970-01-01 00:00:00') ? '<i>'.__('N/A').'</i>' : date_w_fixed_tz($agent['ultimo_contacto_remoto']);
        $table_details->data[] = $data;

        $data = [];
        $data[0] = '<div class="normal_weight mrgn_lft_20px">'.__('Custom fields').'</div>';
        $data[1] = html_print_button(
            __('View custom fields'),
            'custom_button',
            false,
            '$(\'#link_custom_fields\').trigger(\'click\');',
            'class="sub next"',
            true
        );
        $table_details->data[] = $data;
    }

    if ($event['id_agentmodule'] != 0) {
        $module = db_get_row_filter(
            'tagente_modulo',
            [
                'id_agente_modulo' => $event['id_agentmodule'],
                'delete_pending'   => 0,
            ]
        );
    } else {
        $module = [];
    }

    $data = [];
    $data[0] = __('Module details');
    $data[1] = empty($module) ? '<i>'.__('N/A').'</i>' : '';
    $table_details->data[] = $data;

    if (empty($module) === false) {
        // Module name.
        $data = [];
        $data[0] = '<div class="normal_weight mrgn_lft_20px">'.__('Name').'</div>';
        $data[1] = $module['nombre'];
        $table_details->data[] = $data;

        // Module group.
        $data = [];
        $data[0] = '<div class="normal_weight mrgn_lft_20px">'.__('Module group').'</div>';
        $id_module_group = $module['id_module_group'];
        if ($id_module_group == 0) {
            $data[1] = __('No assigned');
        } else {
            $module_group = db_get_value(
                'name',
                'tmodule_group',
                'id_mg',
                $id_module_group
            );
            $data[1] = '<a href="'.$serverstring.'index.php?sec=view&amp;sec2=operation/agentes/status_monitor&amp;status=-1&amp;modulegroup='.$id_module_group.$hashstring.'">';
            $data[1] .= $module_group;
            $data[1] .= '</a>';
        }

        $table_details->data[] = $data;

        // ACL.
        $acl_graph = false;
        if (empty($agent['id_grupo']) === false) {
            $acl_graph = check_acl(
                $config['id_user'],
                $agent['id_grupo'],
                'RR'
            );
        }

        if ($acl_graph) {
            $data = [];
            $data[0] = '<div class="normal_weight mrgn_lft_20px">'.__('Graph').'</div>';

            $module_type = -1;
            if (isset($module['module_type'])) {
                $module_type = $module['module_type'];
            }

            $graph_type = return_graphtype($module_type);
            $url = ui_get_full_url(
                'operation/agentes/stat_win.php',
                false,
                false,
                false
            );
            $handle = dechex(
                crc32($module['id_agente_modulo'].$module['nombre'])
            );
            $win_handle = 'day_'.$handle;

            $graph_params = [
                'type'    => $graph_type,
                'period'  => SECONDS_1DAY,
                'id'      => $module['id_agente_modulo'],
                'refresh' => SECONDS_10MINUTES,
            ];

            if (is_metaconsole() === true && empty($server_id) === false) {
                // Set the server id.
                $graph_params['server'] = $server['id'];
            }

            $graph_params_str = http_build_query($graph_params);

            $link = "winopeng_var('".$url.'?'.$graph_params_str."','".$win_handle."', 800, 480)";

            $data[1] = '<a href="javascript:'.$link.'">';
            $data[1] .= html_print_image('images/chart_curve.png', true, ['class' => 'invert_filter']);
            $data[1] .= '</a>';
            $table_details->data[] = $data;
        }
    }

    $data = [];
    $data[0] = __('Alert details');
    $data[1] = ($event['id_alert_am'] == 0) ? '<i>'.__('N/A').'</i>' : '';
    $table_details->data[] = $data;

    if ($event['id_alert_am'] != 0) {
        $data = [];
        $data[0] = '<div class="normal_weight mrgn_lft_20px">'.__('Source').'</div>';
        $data[1] = '<a href="'.$serverstring.'index.php?sec=estado&amp;sec2=operation/agentes/ver_agente&amp;id_agente='.$event['id_agente'].'&amp;tab=alert'.$hashstring.'">';
        $standby = db_get_value('standby', 'talert_template_modules', 'id', $event['id_alert_am']);
        if (!$standby) {
            $data[1] .= html_print_image(
                'images/bell.png',
                true,
                [
                    'title' => __('Go to data overview'),
                    'class' => 'invert_filter',
                ]
            );
        } else {
            $data[1] .= html_print_image(
                'images/bell_pause.png',
                true,
                [
                    'title' => __('Go to data overview'),
                    'class' => 'invert_filter',
                ]
            );
        }

        $sql = 'SELECT name
			FROM talert_templates
			WHERE id IN (SELECT id_alert_template
					FROM talert_template_modules
					WHERE id = '.$event['id_alert_am'].');';

        $templateName = db_get_sql($sql);

        $data[1] .= $templateName;

        $data[1] .= '</a>';

        $table_details->data[] = $data;

        $data = [];
        $data[0] = '<div class="normal_weight mrgn_lft_20px">'.__('Priority').'</div>';

        $priority_code = db_get_value('priority', 'talert_template_modules', 'id', $event['id_alert_am']);
        $alert_priority = get_priority_name($priority_code);
        $data[1] = html_print_image(
            $img_sev,
            true,
            [
                'class'  => 'image_status',
                'width'  => 61,
                'height' => 28,
                'title'  => $alert_priority,
                'style'  => 'vertical-align:text-bottom',
            ]
        );
        $data[1] .= ' '.$alert_priority;

        $table_details->data[] = $data;
    }

    $data = [];
    $data[0] = __('Instructions');
    $data[1] = html_entity_decode(
        events_display_instructions(
            $event['event_type'],
            $event,
            true,
            $event
        )
    );
    $table_details->data[] = $data;

    $data = [];
    $data[0] = __('Extra id');
    if ($event['id_extra'] != '') {
        $data[1] = $event['id_extra'];
    } else {
        $data[1] = '<i>'.__('N/A').'</i>';
    }

    $table_details->data[] = $data;

    $data = [];
    $data[0] = __('Source');
    if ($event['source'] != '') {
        $data[1] = $event['source'];
    } else {
        $data[1] = '<i>'.__('N/A').'</i>';
    }

    $table_details->data[] = $data;

    $details = '<div id="extended_event_details_page" class="extended_event_pages">'.html_print_table($table_details, true).'</div>';

    if (is_metaconsole() === true && empty($server_id) === false) {
        metaconsole_restore_db();
    }

    return $details;
}


/**
 * Generates content for 'custom data' page in event viewer.
 *
 * @param array $event Event.
 *
 * @return string HTML.
 */
function events_page_custom_data($event)
{
    global $config;

    //
    // Custom data.
    //
    if ($event['custom_data'] == '') {
        return '';
    }

    $table = new stdClass();

    $table->width = '100%';
    $table->data = [];
    $table->head = [];
    $table->class = 'table_modal_alternate';

    $json_custom_data = $event['custom_data'];
    $custom_data = json_decode($json_custom_data);

    if ($custom_data === null) {
        // Try again because is possible that info not come coded.
        $custom_data = json_decode(io_safe_output($event['custom_data']));

        if ($custom_data === null) {
            return '<div id="extended_event_custom_data_page" class="extended_event_pages">'.__('Invalid custom data: %s', $json_custom_data).'</div>';
        }
    }

    $i = 0;
    foreach ($custom_data as $field => $value) {
        $table->data[$i][0] = ucfirst(io_safe_output($field));

        if (is_array($value) === true) {
            $table->data[$i][1] = '<ul>';
            foreach ($value as $individualValue) {
                $table->data[$i][1] .= sprintf('<li>%s</li>', $individualValue);
            }

            $table->data[$i][1] .= '</ul>';
        } else {
            $table->data[$i][1] = io_safe_output($value);
        }

        $i++;
    }

    $custom_data = '<div id="extended_event_custom_data_page" class="extended_event_pages">'.html_print_table($table, true).'</div>';

    return $custom_data;
}


/**
 * Get the event name from tevento and display it in console.
 *
 * @param string $db_name Target event name.
 *
 * @return string Event name.
 */
function events_display_name($db_name='')
{
    return io_safe_output(str_replace('&#x0a;', '<br>', $db_name));
}


/**
 * Get the image and status value of event.
 *
 * @param integer $status Status.
 *
 * @return string Image path.
 */
function events_display_status($status)
{
    switch ($status) {
        case 0:
        return [
            'img'   => 'images/star.png',
            'title' => __('New event'),
        ];

        case 1:
        return [
            'img'   => 'images/tick.png',
            'title' => __('Event validated'),
        ];

        case 2:
        return [
            'img'   => 'images/hourglass.png',
            'title' => __('Event in process'),
        ];

        default:
            // Ignore.
        break;
    }
}


/**
 * Get the instruction of an event.
 *
 * @param string  $event_type Type of event.
 * @param array   $inst       Array with unknown warning and critical
 *                            instructions.
 * @param boolean $italic     Display N/A between italic html marks if
 *                            instruction is not found.
 * @param array   $eventObj   Event object.
 *
 * @return string Safe output.
 */
function events_display_instructions($event_type='', $inst=[], $italic=true, $event=null)
{
    if ($event_type === 'alert_fired') {
        if ($event !== null) {
            // Retrieve alert template type.
            if ((bool) is_metaconsole() === true
                && $event['server_id'] > 0
            ) {
                 enterprise_include_once('include/functions_metaconsole.php');
                $r = enterprise_hook(
                    'metaconsole_connect',
                    [
                        null,
                        $event['server_id'],
                    ]
                );
            }

            $event_type = db_get_value_sql(
                sprintf(
                    'SELECT ta.type
                    FROM talert_templates ta
                    INNER JOIN talert_template_modules tam
                        ON ta.id=tam.id_alert_template
                    WHERE tam.id = %d',
                    $event['id_alert_am']
                )
            );

            if ((bool) is_metaconsole() === true
                && $event['server_id'] > 0
            ) {
                enterprise_hook('metaconsole_restore_db');
            }
        }
    }

    switch ($event_type) {
        case 'going_unknown':
        case 'unknown':
            if ($inst['unknown_instructions'] != '') {
                return str_replace("\n", '<br>', io_safe_output($inst['unknown_instructions']));
            }
        break;

        case 'going_up_warning':
        case 'going_down_warning':
        case 'warning':
            if ($inst['warning_instructions'] != '') {
                return str_replace("\n", '<br>', io_safe_output($inst['warning_instructions']));
            }
        break;

        case 'going_up_critical':
        case 'going_down_critical':
        case 'critical':
            if ($inst['critical_instructions'] != '') {
                return str_replace("\n", '<br>', io_safe_output($inst['critical_instructions']));
            }
        break;

        case 'system':
            $data = [];
            if ($inst['critical_instructions'] != '') {
                return str_replace("\n", '<br>', io_safe_output($inst['critical_instructions']));
            }

            if ($inst['warning_instructions'] != '') {
                return str_replace("\n", '<br>', io_safe_output($inst['warning_instructions']));
            }

            if ($inst['unknown_instructions'] != '') {
                return str_replace("\n", '<br>', io_safe_output($inst['unknown_instructions']));
            }
        break;

        default:
            // Ignore.
        break;
    }

    $na_return = ($italic === true) ? '<i>'.__('N/A').'</i>' : __('N/A');

    return $na_return;
}


/**
 * Generates 'general' page for events viewer.
 *
 * @param array $event Event.
 *
 * @return string HTML.
 */
function events_page_general($event)
{
    global $img_sev;
    global $config;
    global $group_rep;

    $secondary_groups = '';
    if (isset($event['id_agente']) && $event['id_agente'] > 0) {
        enterprise_include_once('include/functions_agents.php');
        $secondary_groups_selected = enterprise_hook('agents_get_secondary_groups', [$event['id_agente'], is_metaconsole()]);
        if (empty($secondary_groups_selected['for_select']) === false) {
            $secondary_groups = implode(', ', $secondary_groups_selected['for_select']);
        }
    }

    // General.
    $table_general = new stdClass;
    $table_general->cellspacing = 0;
    $table_general->cellpadding = 0;
    $table_general->width = '100%';
    $table_general->data = [];
    $table_general->head = [];
    $table_general->class = 'table_modal_alternate';

    $data = [];
    $data[0] = __('Event ID');
    $table_event_id = (isset($event['max_id_evento']) === true) ? $event['max_id_evento'] : $event['id_evento'];
    $data[1] = '#'.$table_event_id;
    $table_general->data[] = $data;

    $data = [];
    $data[0] = __('Event name');
    $data[1] = '<span class="break_word">'.events_display_name($event['evento']).'</span>';
    $table_general->data[] = $data;

    // Show server name in metaconsole.
    if (is_metaconsole() === true && $event['server_name'] !== '') {
        $data = [];
        $data[0] = __('Node');
        $data[1] = '<span class="break_word">'.$event['server_name'].'</span>';
        $table_general->data[] = $data;
    }

    $data = [];
    $data[0] = __('Timestamp');

    if ($group_rep == 1 && $event['event_rep'] > 1) {
        $data[1] = __('First event').': '.date($config['date_format'], $event['timestamp_first']).'<br>'.__('Last event').': '.date($config['date_format'], $event['timestamp_last']);
    } else {
        $data[1] = date($config['date_format'], $event['utimestamp']);
    }

    $table_general->data[] = $data;

    // $event['owner_user'] = $event['id_usuario'];
    $data = [];
    $data[0] = __('Owner');
    if (empty($event['owner_user'])) {
        $data[1] = '<i>'.__('N/A').'</i>';
    } else {
        $user_owner = db_get_value('fullname', 'tusuario', 'id_user', $event['owner_user']);
        if (empty($user_owner)) {
            $user_owner = $event['owner_user'];
        }

        $data[1] = $user_owner;
    }

    $table_general->cellclass[3][1] = 'general_owner';

    $table_general->data[] = $data;

    $data = [];
    $data[0] = __('Type');
    $data[1] = events_print_type_description($event['event_type'], true);
    $data[2] = events_print_type_img(
        $event['event_type'],
        true
    );

    $table_general->data[] = $data;

    $data = [];
    $data[0] = __('Repeated');
    if ($group_rep != 0) {
        if ($event['event_rep'] <= 1) {
            $data[1] = '<i>'.__('No').'</i>';
        } else {
            $data[1] = sprintf('%d Times', $event['event_rep']);
        }
    } else {
        $data[1] = '<i>'.__('No').'</i>';
    }

    $table_general->data[] = $data;

    $data = [];
    $data[0] = __('Severity');
    $event_criticity = get_priority_name($event['criticity']);
    $data[1] = $event_criticity;
    $data[2] = html_print_image(
        $img_sev,
        true,
        [
            'class'  => 'image_status',
            'width'  => 61,
            'height' => 28,
            'title'  => $event_criticity,
        ]
    );
    $table_general->data[] = $data;

    // Get Status.
    $event_st = events_display_status($event['estado']);

    $data = [];

    $table_general->rowid[7] = 'general_status';
    $data[0] = __('Status');
    $data[1] = $event_st['title'];
    $data[2] = html_print_image($event_st['img'], true);
    $table_general->data[] = $data;

    // If event is validated, show who and when acknowleded it.
    $table_general->cellclass[8][1] = 'general_acknowleded';

    $data = [];
    $data[0] = __('Acknowledged by');

    if ($event['estado'] == 1) {
        if (empty($event['id_usuario']) === true) {
            $user_ack = __('Autovalidated');
        } else {
            $user_ack = db_get_value(
                'fullname',
                'tusuario',
                'id_user',
                $event['id_usuario']
            );

            if (empty($user_ack) === true) {
                $user_ack = $event['id_usuario'];
            }
        }

        $data[1] = $user_ack.'&nbsp;(&nbsp;'.date($config['date_format'], $event['ack_utimestamp_raw']).'&nbsp;)&nbsp;';
    } else {
        $data[1] = '<i>'.__('N/A').'</i>';
    }

    $table_general->cellclass[7][1] = 'general_status';

    $table_general->data[] = $data;

    $data = [];
    $data[0] = __('Group');
    $data[1] = groups_get_name($event['id_grupo']);
    if (!$config['show_group_name']) {
        $data[2] = ui_print_group_icon($event['id_grupo'], true);
    }

    $table_general->data[] = $data;

    if (!empty($secondary_groups)) {
        $data = [];
        $data[0] = __('Secondary groups');
        $data[1] = $secondary_groups;

        $table_general->data[] = $data;
    }

    $data = [];
    $data[0] = __('Contact');
    $data[1] = '';
    $contact = db_get_value('contact', 'tgrupo', 'id_grupo', $event['id_grupo']);
    if (empty($contact) === true) {
        $data[1] = '<i>'.__('N/A').'</i>';
    } else {
        $data[1] = $contact;
    }

    $table_general->data[] = $data;

    $data = [];
    $data[0] = __('Tags');

    if ($event['tags'] != '') {
        $tags = tags_get_tags_formatted($event['tags']);

        $data[1] = $tags;
    } else {
        $data[1] = '<i>'.__('N/A').'</i>';
    }

    $table_general->data[] = $data;

    $data = [];
    $data[0] = __('ID extra');
    if ($event['id_extra'] != '') {
        $data[1] = $event['id_extra'];
    } else {
        $data[1] = '<i>'.__('N/A').'</i>';
    }

    $table_general->data[] = $data;

    $data = [];
    $data[0] = __('Module custom ID');
    if ($event['module_custom_id'] != '') {
        $data[1] = $event['module_custom_id'];
    } else {
        $data[1] = '<i>'.__('N/A').'</i>';
    }

    $table_general->data[] = $data;

    $table_data = $table_general->data;
    if (is_array($table_data) === true) {
        $table_data_total = count($table_data);
    } else {
        $table_data_total = -1;
    }

    for ($i = 0; $i <= $table_data_total; $i++) {
        if (isset($table_data[$i]) === true
            && is_array($table_data[$i]) === true
            && count($table_data[$i]) === 2
        ) {
            $table_general->colspan[$i][1] = 2;
            $table_general->style[2] = 'text-align:center; width:10%;';
        }
    }

    $general = '<div id="extended_event_general_page" class="extended_event_pages">';
    $general .= html_print_table($table_general, true);
    $general .= '</div>';

    return $general;
}


/**
 * Generate 'comments' page for event viewer.
 *
 * @param array   $event   Event.
 * @param boolean $ajax    If the query come from AJAX.
 * @param boolean $grouped If the event must shown comments grouped.
 *
 * @return string HTML.
 */
function events_page_comments($event, $ajax=false, $groupedComments=[])
{
    // Comments.
    global $config;

    $table_comments = new stdClass;
    $table_comments->width = '100%';
    $table_comments->data = [];
    $table_comments->head = [];
    $table_comments->class = 'table_modal_alternate';

    if (isset($event['user_comment']) === false) {
        $event['user_comment'] = '';
    }

    $comments = (empty($groupedComments) === true) ? $event['user_comment'] : $groupedComments;

    if (empty($comments) === true) {
        $table_comments->style[0] = 'text-align:center;';
        $table_comments->colspan[0][0] = 2;
        $data = [];
        $data[0] = __('There are no comments');
        $table_comments->data[] = $data;
    } else {
        if (is_array($comments) === true) {
            $comments_array = [];
            foreach ($comments as $comm) {
                if (empty($comm) === true) {
                    continue;
                }

                // If exists user_comments, come from grouped events and must be handled like this.
                if (isset($comm['user_comment']) === true) {
                    $comm = $comm['user_comment'];
                }

                $comm = str_replace(["\n", '&#x0a;'], '<br>', $comm);

                $comments_array[] = io_safe_output(json_decode($comm, true));
            }

            // Plain comments. Can be improved.
            $sortedCommentsArray = [];
            foreach ($comments_array as $comm) {
                if (isset($comm) === true
                    && empty($comm) === false
                ) {
                    foreach ($comm as $subComm) {
                        $sortedCommentsArray[] = $subComm;
                    }
                }
            }

            // Sorting the comments by utimestamp (newer is first).
            usort(
                $sortedCommentsArray,
                function ($a, $b) {
                    if ($a['utimestamp'] == $b['utimestamp']) {
                        return 0;
                    }

                    return ($a['utimestamp'] > $b['utimestamp']) ? -1 : 1;
                }
            );

            // Clean the unsorted comments and return it to the original array.
            $comments_array = [];
            $comments_array[] = $sortedCommentsArray;
        } else {
            $comments = str_replace(["\n", '&#x0a;'], '<br>', $comments);
            // If comments are not stored in json, the format is old.
            $comments_array[] = io_safe_output(json_decode($comments, true));
        }

        foreach ($comments_array as $comm) {
            $comments_format = (empty($comm) === true && is_array($comments) === false) ? 'old' : 'new';

            switch ($comments_format) {
                case 'new':
                    foreach ($comm as $c) {
                        $eventIdExplanation = (empty($groupedComments) === false) ? sprintf(' (#%d)', $c['event_id']) : '';

                        $data[0] = sprintf(
                            '<b>%s %s %s%s</b>',
                            $c['action'],
                            __('by'),
                            $c['id_user'],
                            $eventIdExplanation
                        );

                        $data[0] .= sprintf(
                            '<br><br><i>%s</i>',
                            date($config['date_format'], $c['utimestamp'])
                        );

                        $data[1] = '<p class="break_word">'.stripslashes(str_replace(['\n', '\r'], '<br/>', $c['comment'])).'</p>';

                        $table_comments->data[] = $data;
                    }
                break;

                case 'old':
                    $comm = explode('<br>', $comments);

                    // Split comments and put in table.
                    $col = 0;
                    $data = [];

                    foreach ($comm as $c) {
                        switch ($col) {
                            case 0:
                                $row_text = preg_replace('/\s*--\s*/', '', $c);
                                $row_text = preg_replace('/\<\/b\>/', '</i>', $row_text);
                                $row_text = preg_replace('/\[/', '</b><br><br><i>[', $row_text);
                                $row_text = preg_replace('/[\[|\]]/', '', $row_text);
                            break;

                            case 1:
                                $row_text = preg_replace("/[\r\n|\r|\n]/", '<br>', io_safe_output(strip_tags($c)));
                            break;

                            default:
                                // Ignore.
                            break;
                        }

                        $data[$col] = $row_text;

                        $col++;

                        if ($col == 2) {
                            $col = 0;
                            $table_comments->data[] = $data;
                            $data = [];
                        }
                    }
                break;

                default:
                    // Ignore.
                break;
            }
        }
    }

    if (((tags_checks_event_acl(
        $config['id_user'],
        $event['id_grupo'],
        'EM',
        (isset($event['clean_tags']) === true) ? $event['clean_tags'] : [],
        []
    )) || (tags_checks_event_acl(
        $config['id_user'],
        $event['id_grupo'],
        'EW',
        (isset($event['clean_tags']) === true) ? $event['clean_tags'] : [],
        []
    )))
    ) {
        $event['evento'] = io_safe_output($event['evento']);
        $comments_form = '<br><div id="comments_form" style="width:98%;">';
        $comments_form .= html_print_textarea(
            'comment',
            3,
            10,
            '',
            'class="comments_form"',
            true
        );

        $comments_form .= '<br><div class="right mrgn_top_10px">';
        $comments_form .= html_print_button(
            __('Add comment'),
            'comment_button',
            false,
            'event_comment(\''.base64_encode(json_encode($event)).'\');',
            'class="sub next"',
            true
        );
        $comments_form .= '</div><br></div>';
    } else {
        $comments_form = ui_print_message(
            __('If event replication is ongoing, it won\'t be possible to enter comments here. This option is only to allow local pandora users to see comments, but not to operate with them. The operation, when event replication is enabled, must be done only in the Metaconsole.')
        );
    }

    if ($ajax === true) {
        return $comments_form.html_print_table($table_comments, true);
    }

    return '<div id="extended_event_comments_page" class="extended_event_pages">'.$comments_form.html_print_table($table_comments, true).'</div>';
}


/**
 * Retrieve event tags (cleaned).
 *
 * @param string $tags Tags.
 *
 * @return array of Tags.
 */
function events_clean_tags($tags)
{
    if (empty($tags)) {
        return [];
    }

    $event_tags = tags_get_tags_formatted($tags, false);
    return explode(',', str_replace(' ', '', $event_tags));
}


/**
 * Get all the events happened in a group during a period of time.
 *
 * @param array $data Data.
 *
 * @return array An array with all the events happened.
 */
function events_get_count_events_validated_by_user($data)
{
    $data_graph_by_user = [];
    if (empty($data) === false) {
        foreach ($data as $value) {
            $k = $value['id_usuario'];

            if (empty($k) === true
                && ($value['estado'] == EVENT_VALIDATE
                || $value['status'] == EVENT_VALIDATE)
            ) {
                if (isset($data_graph_by_user['System']) === true) {
                    $data_graph_by_user['System']++;
                } else {
                    $data_graph_by_user['System'] = 1;
                }
            } else if (empty($k) === false) {
                if (isset($data_graph_by_user[$k]) === true) {
                    $data_graph_by_user[$k]++;
                } else {
                    $data_graph_by_user[$k] = 1;
                }
            }
        }

        if (empty($data_graph_by_user) === false) {
            $sql = sprintf(
                'SELECT fullname, id_user
                FROM tusuario
                WHERE id_user IN ("%s")',
                implode('","', array_keys($data_graph_by_user))
            );

            $fullnames = db_get_all_rows_sql($sql);

            if ($fullnames !== false
                && empty($fullnames) === false
            ) {
                foreach ($fullnames as $value) {
                    if (isset($data_graph_by_user[$value['id_user']]) === true) {
                        $data_graph_by_user[$value['fullname']] = $data_graph_by_user[$value['id_user']];
                        unset($data_graph_by_user[$value['id_user']]);
                    }
                }
            }
        }
    }

    return $data_graph_by_user;
}


/**
 * Retrieves SQL for custom order.
 *
 * @param string  $sort_field  Field.
 * @param string  $sort        Order.
 * @param integer $group_rep   Group field.
 * @param boolean $only-fields Return only fields.
 *
 * @return string SQL.
 */
function events_get_sql_order($sort_field='timestamp', $sort='DESC', $group_rep=0, $only_fields=false)
{
    $sort_field_translated = $sort_field;
    switch ($sort_field) {
        case 'event_id':
            $sort_field_translated = 'id_evento';
        break;

        case 'event_name':
            $sort_field_translated = 'evento';
        break;

        case 'status':
            $sort_field_translated = 'estado';
        break;

        case 'agent_id':
            $sort_field_translated = 'id_agente';
        break;

        case 'timestamp':
            $sort_field_translated = ($group_rep == 0) ? 'timestamp' : 'timestamp_last';
        break;

        case 'user_id':
            $sort_field_translated = 'id_usuario';
        break;

        case 'owner':
            $sort_field_translated = 'owner_user';
        break;

        case 'group_id':
            $sort_field_translated = 'id_grupo';
        break;

        case 'alert_id':
            $sort_field_translated = 'id_alert_am';
        break;

        case 'comment':
            $sort_field_translated = 'user_comment';
        break;

        case 'extra_id':
            $sort_field_translated = 'id_extra';
        break;

        default:
            $sort_field_translated = $sort_field;
        break;
    }

    if (strtolower($sort) != 'asc' && strtolower($sort) != 'desc') {
        $dir = ($sort == 'up') ? 'ASC' : 'DESC';
    } else {
        $dir = $sort;
    }

    if ($only_fields) {
        return $sort_field_translated.' '.$dir;
    }

    return 'ORDER BY '.$sort_field_translated.' '.$dir;
}


/**
 * SQL left join of event queries to handle secondary groups.
 *
 * @param string $table Table to use based on environment.
 *
 * @return string With the query.
 */
function events_get_secondary_groups_left_join($table)
{
    if ($table == 'tevento') {
        return 'LEFT JOIN tagent_secondary_group tasg ON te.id_agente = tasg.id_agent';
    }

    return 'LEFT JOIN tmetaconsole_agent_secondary_group tasg
		ON te.id_agente = tasg.id_tagente AND te.server_id = tasg.id_tmetaconsole_setup';
}


/**
 * Replace macros in any string given an event id.
 * If server_id > 0, it's a metaconsole query.
 *
 * @param integer $event_id Event identifier.
 * @param integer $value    String value in which we want to apply macros.
 *
 * @return string The response text with the macros applied.
 */
function events_get_field_value_by_event_id(
    int $event_id,
    $value
) {
    global $config;

    $event = db_get_row('tevento', 'id_evento', $event_id);

    // Replace each macro.
    if (strpos($value, '_agent_address_') !== false) {
        $agente_table_name = 'tagente';
        $filter = ['id_agente' => $event['id_agente']];

        $ip = db_get_value_filter('direccion', $agente_table_name, $filter);
        // If agent does not have an IP, display N/A.
        if ($ip === false) {
            $ip = __('N/A');
        }

        $value = str_replace('_agent_address_', $ip, $value);
    }

    if (strpos($value, '_agent_id_') !== false) {
        $value = str_replace('_agent_id_', $event['id_agente'], $value);
    }

    if (strpos($value, '_module_address_') !== false) {
        if ($event['id_agentmodule'] != 0) {
            $module = db_get_row('tagente_modulo', 'id_agente_modulo', $event['id_agentmodule']);
            if (empty($module['ip_target'])) {
                $module['ip_target'] = __('N/A');
            }

            $value = str_replace('_module_address_', $module['ip_target'], $value);
            if (empty($module['nombre'])) {
                $module['nombre'] = __('N/A');
            }
        } else {
            $value = str_replace('_module_address_', __('N/A'), $value);
        }
    }

    if (strpos($value, '_module_name_') !== false) {
        if ($event['id_agentmodule'] != 0) {
            $module = db_get_row('tagente_modulo', 'id_agente_modulo', $event['id_agentmodule']);
            if (empty($module['ip_target'])) {
                $module['ip_target'] = __('N/A');
            }

            $value = str_replace(
                '_module_name_',
                io_safe_output($module['nombre']),
                $value
            );
        } else {
            $value = str_replace('_module_name_', __('N/A'), $value);
        }
    }

    if (strpos($value, '_event_id_') !== false) {
        $value = str_replace('_event_id_', $event['id_evento'], $value);
    }

    if (strpos($value, '_user_id_') !== false) {
        if (!empty($event['id_usuario'])) {
            $value = str_replace('_user_id_', $event['id_usuario'], $value);
        } else {
            $value = str_replace('_user_id_', __('N/A'), $value);
        }
    }

    if (strpos($value, '_group_id_') !== false) {
        $value = str_replace('_group_id_', $event['id_grupo'], $value);
    }

    if (strpos($value, '_group_name_') !== false) {
        $value = str_replace(
            '_group_name_',
            io_safe_output(groups_get_name($event['id_grupo'], true)),
            $value
        );
    }

    if (strpos($value, '_event_utimestamp_') !== false) {
        $value = str_replace(
            '_event_utimestamp_',
            $event['utimestamp'],
            $value
        );
    }

    if (strpos($value, '_event_date_') !== false) {
        $value = str_replace(
            '_event_date_',
            io_safe_output(
                date($config['date_format'], $event['utimestamp'])
            ),
            $value
        );
    }

    if (strpos($value, '_event_text_') !== false) {
        $value = str_replace(
            '_event_text_',
            events_display_name($event['evento']),
            $value
        );
    }

    if (strpos($value, '_event_type_') !== false) {
        $value = str_replace(
            '_event_type_',
            events_print_type_description($event['event_type'], true),
            $value
        );
    }

    if (strpos($value, '_alert_id_') !== false) {
        $value = str_replace(
            '_alert_id_',
            empty($event['is_alert_am']) ? __('N/A') : $event['is_alert_am'],
            $value
        );
    }

    if (strpos($value, '_event_severity_id_') !== false) {
        $value = str_replace('_event_severity_id_', $event['criticity'], $value);
    }

    if (strpos($value, '_event_severity_text_') !== false) {
        $value = str_replace(
            '_event_severity_text_',
            get_priority_name($event['criticity']),
            $value
        );
    }

    if (strpos($value, '_module_id_') !== false) {
        $value = str_replace('_module_id_', $event['id_agentmodule'], $value);
    }

    if (strpos($value, '_event_tags_') !== false) {
        $value = str_replace('_event_tags_', $event['tags'], $value);
    }

    if (strpos($value, '_event_extra_id_') !== false) {
        if (empty($event['id_extra'])) {
            $value = str_replace('_event_extra_id_', __('N/A'), $value);
        } else {
            $value = str_replace('_event_extra_id_', $event['id_extra'], $value);
        }
    }

    if (strpos($value, '_event_source_') !== false) {
        $value = str_replace('_event_source_', $event['source'], $value);
    }

    if (strpos($value, '_event_instruction_') !== false) {
        $value = str_replace(
            '_event_instruction_',
            events_display_instructions(
                $event['event_type'],
                $event,
                false,
                $event
            ),
            $value
        );
    }

    if (strpos($value, '_owner_user_') !== false) {
        if (empty($event['owner_user'])) {
            $value = str_replace('_owner_user_', __('N/A'), $value);
        } else {
            $value = str_replace('_owner_user_', $event['owner_user'], $value);
        }
    }

    if (strpos($value, '_event_status_') !== false) {
        $event_st = events_display_status($event['estado']);
        $value = str_replace('_event_status_', $event_st['title'], $value);
    }

    if (strpos($value, '_group_custom_id_') !== false) {
        $group_custom_id = db_get_value_sql(
            sprintf(
                'SELECT custom_id FROM tgrupo WHERE id_grupo=%s',
                $event['id_grupo']
            )
        );
        $event_st = events_display_status($event['estado']);
        $value = str_replace('_group_custom_id_', $group_custom_id, $value);
    }

    // Parse the event custom data.
    if (!empty($event['custom_data'])) {
        $custom_data = json_decode($event['custom_data']);
        foreach ($custom_data as $key => $val) {
            $value = str_replace('_customdata_'.$key.'_', $val, $value);
        }
    }

    // This will replace the macro with the current logged user.
    if (strpos($value, '_current_user_') !== false) {
        $value = str_replace('_current_user_', $config['id_user'], $value);
    }

    if (strpos($value, '_owner_username_') !== false) {
        if (empty($event['owner_user']) === false) {
            $fullname = users_get_user_by_id($event['owner_user']);
            $value = str_replace(
                '_owner_username_',
                io_safe_output($fullname['fullname']),
                $value
            );
        } else {
            $value = str_replace('_owner_username_', __('N/A'), $value);
        }
    }

    if (strpos($value, '_current_username_') !== false) {
        $fullname = users_get_user_by_id($config['id_user']);
        $value = str_replace(
            '_current_username_',
            io_safe_output($fullname['fullname']),
            $value
        );
    }

    return $value;

}


function events_get_instructions($event)
{
    if (is_array($event) === false) {
        return '';
    }

    switch ($event['event_type']) {
        case 'going_unknown':
            if ($event['unknown_instructions'] != '') {
                $value = str_replace(
                    "\n",
                    '<br>',
                    io_safe_output($event['unknown_instructions'])
                );
            }
        break;

        case 'going_up_warning':
        case 'going_down_warning':
            if ($event['warning_instructions'] != '') {
                $value = str_replace(
                    "\n",
                    '<br>',
                    io_safe_output($event['warning_instructions'])
                );
            }
        break;

        case 'going_up_critical':
        case 'going_down_critical':
            if ($event['critical_instructions'] != '') {
                $value = str_replace(
                    "\n",
                    '<br>',
                    io_safe_output($event['critical_instructions'])
                );
            }
        break;

        default:
            // Not posible.
        break;
    }

    if (isset($value) === false) {
        return '';
    }

    $max_text_length = 300;
    $over_text = io_safe_output($value);
    if (strlen($over_text) > ($max_text_length + 3)) {
        $over_text = substr($over_text, 0, $max_text_length).'...';
    }

    $output  = '<div id="hidden_event_instructions_'.$event['id_evento'].'"';
    $output .= ' class="event_instruction">';
    $output .= $value;
    $output .= '</div>';
    $output .= '<center>';
    $output .= '<span id="value_event_'.$event['id_evento'].'" class="nowrap">';
    $output .= '<span id="value_event_text_'.$event['id_evento'].'"></span>';
    $output .= '<a href="javascript:show_instructions('.$event['id_evento'].')">';
    $output .= html_print_image(
        'images/default_list.png',
        true,
        ['title' => $over_text]
    ).'</a></span>';
    $output .= '</center>';

    return $output;
}


/**
 * Return class name matching criticity received.
 *
 * @param integer $criticity Event's criticity.
 *
 * @return string
 */
function events_get_criticity_class($criticity)
{
    switch ($criticity) {
        case EVENT_CRIT_CRITICAL:
        return 'datos_red';

        case EVENT_CRIT_MAINTENANCE:
        return 'datos_grey';

        case EVENT_CRIT_INFORMATIONAL:
        return 'datos_blue';

        case EVENT_CRIT_MAJOR:
        return 'datos_pink';

        case EVENT_CRIT_MINOR:
        return 'datos_pink';

        case EVENT_CRIT_NORMAL:
        return 'datos_green';

        case EVENT_CRIT_WARNING:
        return 'datos_yellow';

        default:
        return 'datos_blue';
    }
}