Rewrite part of thehivealerter

[agix]

Using hive_alert_config_type: classic option, thehivealerter now use the standard create_title and create_alert_body methods as the other alerter.

The rest of the specificity of thehive is handled as before.

For aggregations, only one alert is created with standard aggregation_summary_text and artifacts are combined across the matches.

[agix]

Example of rule

name: 'Test'

alert:
  - hivealerter
aggregation:
  seconds: 15
aggregation_key: aggregation_key

summary_table_fields:
  - field1
  - field2

filter:
- query:
    query_string:
      query: "(type:test)"

alert_text: |
  {0}
  {1}
alert_text_args:
  - name
  - aggregation_key
  - aggregation_summary

hive_alert_config_type: classic

hive_alert_config:
  type: 'test'
  source: 'elastalert-{rule[name]}'
  severity: 3
  tags: ['malicious behavior']
  tlp: 2
  status: 'New'
  follow: True

hive_observable_data_mapping:
  - ip: "{match[field1]}"
  - source: "{match[field2]}"

[agix]

Merged in #2585