33 lines
749 B
Go
33 lines
749 B
Go
package ingest
|
|
|
|
import (
|
|
"encoding/json"
|
|
"testing"
|
|
)
|
|
|
|
func TestParseSyslogPayloadPri(t *testing.T) {
|
|
p := parseSyslogPayload([]byte("<34>Oct 11 22:14:15 mymachine su: 'su root' failed for lonvick on /dev/pts/8"))
|
|
if p.Priority != 34 {
|
|
t.Fatalf("priority=%d", p.Priority)
|
|
}
|
|
}
|
|
|
|
func TestForwardAlertBodyIncludesRawData(t *testing.T) {
|
|
raw := []byte(`{"source":"syslog","parsed":{}}`)
|
|
b := AlertReceiveBody{
|
|
AlertName: "a",
|
|
RawData: raw,
|
|
}
|
|
data, err := json.Marshal(b)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
var dec map[string]json.RawMessage
|
|
if err := json.Unmarshal(data, &dec); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if string(dec["raw_data"]) != string(raw) {
|
|
t.Fatalf("raw_data %s", dec["raw_data"])
|
|
}
|
|
}
|