Public/fgAI
SHA256
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix relation -

Browse Source
This commit is contained in:
larssand
2026-07-02 16:16:30 +02:00
parent 7d0e66c239
commit 009c54b206
3 changed files with 135 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
tests/test_profile_suggestions.py
View File

@@ -221,6 +221,34 @@ class ProfileSuggestionTests(unittest.TestCase):
self.assertIn("*_status", shared)
self.assertIn("*_name", shared)
def test_heuristic_profile_recommends_behavior_relationships(self):
events = [
parse_log_line(
f"fgai_stream_id=windows fgai_stream=Windows username=user{index % 3} srcip=10.0.0.{index % 5} hostname=host{index % 4} action=success eventid=4624"
)
for index in range(1, 40)
]
suggestion = suggest_stream_profiles(events)[0]
relationships = {(item["left"], item["right"]) for item in suggestion["relationship_fields"]}
self.assertIn(("username", "srcip"), relationships)
self.assertIn("username->srcip", suggestion["discovery"]["selected_fields"]["relationships"])
self.assertEqual(suggestion["profile"]["relationship_fields"], suggestion["relationship_fields"])
def test_heuristic_profile_recommends_generic_entity_behavior_relationships(self):
events = [
parse_log_line(
f"fgai_stream_id=app fgai_stream=App entry_context_clientipaddress=10.0.0.{index % 5} entry_context_type={'login' if index % 2 else 'update'} houston_category=cat{index % 3}"
)
for index in range(1, 40)
]
suggestion = suggest_stream_profiles(events)[0]
relationships = {(item["left"], item["right"]) for item in suggestion["relationship_fields"]}
self.assertIn(("entry_context_clientipaddress", "entry_context_type"), relationships)
def test_applies_valid_llm_advice_and_rejects_unknown_fields(self):
suggestion = suggest_stream_profiles([
parse_log_line("fgai_stream_id=windows fgai_stream=Windows username=alice hostname=host01 eventid=4625 action=failure")