multi-entity stream profiles.
This commit is contained in:
@@ -22,7 +22,7 @@ class MonitorTests(unittest.TestCase):
|
|||||||
encoding="utf-8",
|
encoding="utf-8",
|
||||||
)
|
)
|
||||||
|
|
||||||
status = build_status(str(log_path))
|
status = build_status(str(log_path), incident_path=str(Path(tmp) / "incidents.json"))
|
||||||
|
|
||||||
self.assertEqual(status["summary"]["total"], 3)
|
self.assertEqual(status["summary"]["total"], 3)
|
||||||
self.assertGreaterEqual(len(status["anomalies"]), 1)
|
self.assertGreaterEqual(len(status["anomalies"]), 1)
|
||||||
@@ -48,7 +48,7 @@ class MonitorTests(unittest.TestCase):
|
|||||||
encoding="utf-8",
|
encoding="utf-8",
|
||||||
)
|
)
|
||||||
with patch("fgai.monitor.BaselineStore.profile_readiness", return_value=[{"stream_id": "66fe", "field": "action", "buckets": 12, "ready": True}]):
|
with patch("fgai.monitor.BaselineStore.profile_readiness", return_value=[{"stream_id": "66fe", "field": "action", "buckets": 12, "ready": True}]):
|
||||||
status = build_status(str(Path(tmp) / "missing.log"), baseline_path=str(Path(tmp) / "baseline.sqlite3"), config_path=str(config_path))
|
status = build_status(str(Path(tmp) / "missing.log"), baseline_path=str(Path(tmp) / "baseline.sqlite3"), config_path=str(config_path), incident_path=str(Path(tmp) / "incidents.json"))
|
||||||
|
|
||||||
self.assertEqual(status["profile_readiness"][0]["stream_name"], "Fortigate")
|
self.assertEqual(status["profile_readiness"][0]["stream_name"], "Fortigate")
|
||||||
self.assertEqual(status["profile_readiness"][0]["profile_name"], "Fortigate profile")
|
self.assertEqual(status["profile_readiness"][0]["profile_name"], "Fortigate profile")
|
||||||
@@ -70,7 +70,7 @@ class MonitorTests(unittest.TestCase):
|
|||||||
encoding="utf-8",
|
encoding="utf-8",
|
||||||
)
|
)
|
||||||
with patch("fgai.monitor.BaselineStore.profile_readiness", return_value=[{"stream_id": "firewall", "field": "action", "buckets": 12, "ready": True}]):
|
with patch("fgai.monitor.BaselineStore.profile_readiness", return_value=[{"stream_id": "firewall", "field": "action", "buckets": 12, "ready": True}]):
|
||||||
status = build_status(str(Path(tmp) / "missing.log"), baseline_path=str(Path(tmp) / "baseline.sqlite3"), config_path=str(config_path))
|
status = build_status(str(Path(tmp) / "missing.log"), baseline_path=str(Path(tmp) / "baseline.sqlite3"), config_path=str(config_path), incident_path=str(Path(tmp) / "incidents.json"))
|
||||||
|
|
||||||
coverage = {item["stream_id"]: item for item in status["stream_coverage"]}
|
coverage = {item["stream_id"]: item for item in status["stream_coverage"]}
|
||||||
self.assertEqual(coverage["firewall"]["health"], "no_events")
|
self.assertEqual(coverage["firewall"]["health"], "no_events")
|
||||||
|
|||||||
Reference in New Issue
Block a user