output/alert: rewrite code for app-layer properties

[catenacyber]

Link to redmine ticket:
https://redmine.openinfosecfoundation.org/issues/3827
preliminary work for https://redmine.openinfosecfoundation.org/issues/5053 and app-layer plugins
preliminary work for https://redmine.openinfosecfoundation.org/issues/5977 as well
Part of #8961

Describe changes:

• Fix setup-app-layer script so that it adds app-layer metadata to alerts

After that, there is still from #8961

• addition of protocols missing alert metadata (like krb5) + behavioral change for dns alert metadata
• reusing these SimpleTxLogFunc from a JsonGenericLogger to remove many C files

#9252 with some renaming as per code review + reusing code for output-json-file.c

Same as #9499 but without the force-push on github

[codecov]

Codecov Report

Merging #9511 (1e77969) into master (af4bb91) will decrease coverage by 0.03%.
The diff coverage is 96.47%.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #9511      +/-   ##
==========================================
- Coverage   82.19%   82.16%   -0.03%     
==========================================
  Files         968      968              
  Lines      274203   274059     -144     
==========================================
- Hits       225373   225193     -180     
- Misses      48830    48866      +36     

Flag	Coverage Δ
fuzzcorpus	64.02% <96.47%> (-0.07%)	⬇️
suricata-verify	60.88% <95.29%> (-0.07%)	⬇️
unittests	62.92% <0.00%> (+0.03%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

[suricata-qa]

Information: QA ran without warnings.

Pipeline 16262

[jasonish]

I want to see this land as soon as possible, but I also want the commit message to explain a little bit more about whats going on. The ticket referenced may be related, but this is more about the actual logging, then the initialization of logging.

[victorjulien]

Still not really a fan of introducing a new global hard coded table. But I guess if this is a step towards making things more dynamic I can live with it.

[jasonish]

Still not really a fan of introducing a new global hard coded table. But I guess if this is a step towards making things more dynamic I can live with it.

Yeah, me to. I think without this step, future steps will just take longer to complete tho.

[catenacyber]

Replaced by #9768