fix tests
This commit is contained in:
parent
c7614a327a
commit
1eaaa2075d
|
@ -2,24 +2,34 @@ package alertcontext
|
|||
|
||||
import (
|
||||
"fmt"
|
||||
"path/filepath"
|
||||
"testing"
|
||||
|
||||
"github.com/crowdsecurity/crowdsec/pkg/csconfig"
|
||||
"github.com/crowdsecurity/crowdsec/pkg/models"
|
||||
"github.com/crowdsecurity/crowdsec/pkg/types"
|
||||
"github.com/stretchr/testify/assert"
|
||||
"github.com/stretchr/testify/require"
|
||||
)
|
||||
|
||||
func TestNewAlertContext(t *testing.T) {
|
||||
contextFileFullPath, err := filepath.Abs("./tests/context.yaml")
|
||||
require.NoError(t, err)
|
||||
tests := []struct {
|
||||
name string
|
||||
contextToSend map[string][]string
|
||||
contextToSend []csconfig.ContextToSend
|
||||
valueLength int
|
||||
expectedErr error
|
||||
}{
|
||||
{
|
||||
name: "basic config test",
|
||||
contextToSend: map[string][]string{
|
||||
"test": {"evt.Parsed.source_ip"},
|
||||
contextToSend: []csconfig.ContextToSend{
|
||||
csconfig.ContextToSend{
|
||||
SourceFile: contextFileFullPath,
|
||||
Context: map[string][]string{
|
||||
"source_ip": {"evt.Parsed.source_ip"},
|
||||
},
|
||||
},
|
||||
},
|
||||
valueLength: 100,
|
||||
expectedErr: nil,
|
||||
|
@ -35,19 +45,27 @@ func TestNewAlertContext(t *testing.T) {
|
|||
}
|
||||
|
||||
func TestEventToContext(t *testing.T) {
|
||||
contextFileFullPath, err := filepath.Abs("./tests/context.yaml")
|
||||
require.NoError(t, err)
|
||||
|
||||
tests := []struct {
|
||||
name string
|
||||
contextToSend map[string][]string
|
||||
contextToSend []csconfig.ContextToSend
|
||||
valueLength int
|
||||
events []types.Event
|
||||
expectedResult models.Meta
|
||||
}{
|
||||
{
|
||||
name: "basic test",
|
||||
contextToSend: map[string][]string{
|
||||
contextToSend: []csconfig.ContextToSend{
|
||||
csconfig.ContextToSend{
|
||||
SourceFile: contextFileFullPath,
|
||||
Context: map[string][]string{
|
||||
"source_ip": {"evt.Parsed.source_ip"},
|
||||
"nonexistent_field": {"evt.Parsed.nonexist"},
|
||||
},
|
||||
},
|
||||
},
|
||||
valueLength: 100,
|
||||
events: []types.Event{
|
||||
{
|
||||
|
@ -66,10 +84,14 @@ func TestEventToContext(t *testing.T) {
|
|||
},
|
||||
{
|
||||
name: "test many events",
|
||||
contextToSend: map[string][]string{
|
||||
contextToSend: []csconfig.ContextToSend{
|
||||
csconfig.ContextToSend{
|
||||
SourceFile: contextFileFullPath,
|
||||
Context: map[string][]string{
|
||||
"source_ip": {"evt.Parsed.source_ip"},
|
||||
"source_machine": {"evt.Parsed.source_machine"},
|
||||
"cve": {"evt.Parsed.cve"},
|
||||
"cve": {"evt.Parsed.cve"}},
|
||||
},
|
||||
},
|
||||
valueLength: 100,
|
||||
events: []types.Event{
|
||||
|
@ -112,11 +134,17 @@ func TestEventToContext(t *testing.T) {
|
|||
},
|
||||
{
|
||||
name: "test many events with result above max length (need truncate, keep only 2 on 3 elements)",
|
||||
contextToSend: map[string][]string{
|
||||
contextToSend: []csconfig.ContextToSend{
|
||||
csconfig.ContextToSend{
|
||||
SourceFile: contextFileFullPath,
|
||||
Context: map[string][]string{
|
||||
"source_ip": {"evt.Parsed.source_ip"},
|
||||
"source_machine": {"evt.Parsed.source_machine"},
|
||||
"uri": {"evt.Parsed.uri"},
|
||||
},
|
||||
},
|
||||
},
|
||||
|
||||
valueLength: 100,
|
||||
events: []types.Event{
|
||||
{
|
||||
|
@ -158,11 +186,16 @@ func TestEventToContext(t *testing.T) {
|
|||
},
|
||||
{
|
||||
name: "test one events with result above max length (need truncate on one element)",
|
||||
contextToSend: map[string][]string{
|
||||
contextToSend: []csconfig.ContextToSend{
|
||||
csconfig.ContextToSend{
|
||||
SourceFile: contextFileFullPath,
|
||||
Context: map[string][]string{
|
||||
"source_ip": {"evt.Parsed.source_ip"},
|
||||
"source_machine": {"evt.Parsed.source_machine"},
|
||||
"uri": {"evt.Parsed.uri"},
|
||||
},
|
||||
},
|
||||
},
|
||||
valueLength: 100,
|
||||
events: []types.Event{
|
||||
{
|
||||
|
|
|
@ -36,6 +36,9 @@ func TestLoadCrowdsec(t *testing.T) {
|
|||
contextFileFullPath, err := filepath.Abs("./tests/context.yaml")
|
||||
require.NoError(t, err)
|
||||
|
||||
contextDirFullPath, err := filepath.Abs("./tests/context/")
|
||||
require.NoError(t, err)
|
||||
|
||||
tests := []struct {
|
||||
name string
|
||||
input *Config
|
||||
|
@ -66,6 +69,7 @@ func TestLoadCrowdsec(t *testing.T) {
|
|||
Enable: ptr.Of(true),
|
||||
AcquisitionDirPath: "",
|
||||
ContextPath: contextFileFullPath,
|
||||
ContextDir: contextDirFullPath,
|
||||
AcquisitionFilePath: acquisFullPath,
|
||||
ConfigDir: configDirFullPath,
|
||||
DataDir: dataFullPath,
|
||||
|
@ -79,7 +83,7 @@ func TestLoadCrowdsec(t *testing.T) {
|
|||
SimulationFilePath: "./tests/simulation.yaml",
|
||||
ContextToSend: []ContextToSend{
|
||||
ContextToSend{
|
||||
SourceFile: "./tests/context.yaml",
|
||||
SourceFile: contextFileFullPath,
|
||||
Context: map[string][]string{
|
||||
"source_ip": {"evt.Parsed.source_ip"},
|
||||
},
|
||||
|
@ -115,6 +119,7 @@ func TestLoadCrowdsec(t *testing.T) {
|
|||
AcquisitionDirPath: acquisDirFullPath,
|
||||
AcquisitionFilePath: acquisFullPath,
|
||||
ContextPath: contextFileFullPath,
|
||||
ContextDir: contextDirFullPath,
|
||||
ConfigDir: configDirFullPath,
|
||||
HubIndexFile: hubIndexFileFullPath,
|
||||
DataDir: dataFullPath,
|
||||
|
@ -126,7 +131,7 @@ func TestLoadCrowdsec(t *testing.T) {
|
|||
AcquisitionFiles: []string{acquisFullPath, acquisInDirFullPath},
|
||||
ContextToSend: []ContextToSend{
|
||||
ContextToSend{
|
||||
SourceFile: "./tests/context.yaml",
|
||||
SourceFile: contextFileFullPath,
|
||||
Context: map[string][]string{
|
||||
"source_ip": {"evt.Parsed.source_ip"},
|
||||
},
|
||||
|
@ -169,11 +174,12 @@ func TestLoadCrowdsec(t *testing.T) {
|
|||
ParserRoutinesCount: 1,
|
||||
OutputRoutinesCount: 1,
|
||||
ContextValueLength: 10,
|
||||
ContextDir: contextDirFullPath,
|
||||
AcquisitionFiles: []string{},
|
||||
SimulationFilePath: "",
|
||||
ContextToSend: []ContextToSend{
|
||||
ContextToSend{
|
||||
SourceFile: "./tests/context.yaml",
|
||||
SourceFile: contextFileFullPath,
|
||||
Context: map[string][]string{
|
||||
"source_ip": {"evt.Parsed.source_ip"},
|
||||
},
|
||||
|
|
Loading…
Reference in a new issue