fix delete och ollama
This commit is contained in:
@@ -52,11 +52,52 @@ class LlmTests(unittest.TestCase):
|
||||
self.assertEqual(compact["capabilities"]["graylog_mcp"]["status"], "connected")
|
||||
self.assertNotIn("streams", compact["capabilities"]["graylog_mcp"])
|
||||
self.assertEqual(len(compact["event_context"]["source_profiles"]), 10)
|
||||
self.assertEqual(len(compact["event_context"]["related_activity"]), 20)
|
||||
self.assertEqual(len(compact["event_context"]["related_activity"]), 12)
|
||||
self.assertEqual(compact["field_deviations"][0]["entity"], "alice")
|
||||
self.assertNotIn("sample_events", compact["field_deviations"][0])
|
||||
self.assertNotIn("graylog_query", str(compact))
|
||||
|
||||
def test_dashboard_compaction_strips_incident_and_correlation_samples(self):
|
||||
status = {
|
||||
"incidents": [
|
||||
{
|
||||
"entity": "10.0.0.5",
|
||||
"score": 90,
|
||||
"severity": "critical",
|
||||
"correlated_streams": ["Firewall", "Proxy"],
|
||||
"evidence": ["large burst of blocked traffic"],
|
||||
"timeline": [{"message": "raw incident evidence", "graylog_query": "srcip:10.0.0.5"}],
|
||||
}
|
||||
],
|
||||
"cross_source_correlations": [
|
||||
{
|
||||
"entity": "10.0.0.5",
|
||||
"streams": ["Firewall", "Proxy"],
|
||||
"events": 20,
|
||||
"samples": [{"message": "raw correlation evidence", "graylog_query": "srcip:10.0.0.5"}],
|
||||
}
|
||||
],
|
||||
"anomalies": [
|
||||
{
|
||||
"subject": "10.0.0.5",
|
||||
"score": 90,
|
||||
"severity": "critical",
|
||||
"reasons": ["burst"],
|
||||
"evidence": {"timed_events": 100, "sample_events": [{"message": "raw anomaly"}]},
|
||||
}
|
||||
],
|
||||
}
|
||||
|
||||
compact = compact_dashboard_analysis(status)
|
||||
compact_text = str(compact)
|
||||
|
||||
self.assertNotIn("timeline", compact_text)
|
||||
self.assertNotIn("samples", compact_text)
|
||||
self.assertNotIn("sample_events", compact_text)
|
||||
self.assertNotIn("graylog_query", compact_text)
|
||||
self.assertNotIn("raw incident evidence", compact_text)
|
||||
self.assertEqual(compact["incidents"][0]["entity"], "10.0.0.5")
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
unittest.main()
|
||||
|
||||
Reference in New Issue
Block a user