101 lines
4.6 KiB
Python
101 lines
4.6 KiB
Python
import tempfile
|
|
import json
|
|
import unittest
|
|
from pathlib import Path
|
|
from unittest.mock import patch
|
|
|
|
from fgai.monitor import add_llm_assessment, build_status, write_status
|
|
|
|
|
|
class MonitorTests(unittest.TestCase):
|
|
def test_build_status_from_log_file(self):
|
|
with tempfile.TemporaryDirectory() as tmp:
|
|
log_path = Path(tmp) / "fg.log"
|
|
log_path.write_text(
|
|
"\n".join(
|
|
[
|
|
'type=utm subtype=ips srcip=8.8.8.8 dstip=10.0.0.10 service=https action=blocked severity=critical',
|
|
'type=utm subtype=ips srcip=8.8.8.8 dstip=10.0.0.10 service=https action=blocked severity=critical',
|
|
'type=utm subtype=ips srcip=8.8.8.8 dstip=10.0.0.10 service=https action=blocked severity=critical',
|
|
]
|
|
),
|
|
encoding="utf-8",
|
|
)
|
|
|
|
status = build_status(str(log_path))
|
|
|
|
self.assertEqual(status["summary"]["total"], 3)
|
|
self.assertGreaterEqual(len(status["anomalies"]), 1)
|
|
|
|
def test_write_status_creates_parent_directory(self):
|
|
with tempfile.TemporaryDirectory() as tmp:
|
|
output = Path(tmp) / "state" / "status.json"
|
|
|
|
write_status({"ok": True}, str(output))
|
|
|
|
self.assertTrue(output.exists())
|
|
|
|
def test_profile_readiness_includes_stream_and_profile_names(self):
|
|
with tempfile.TemporaryDirectory() as tmp:
|
|
config_path = Path(tmp) / "config.json"
|
|
config_path.write_text(
|
|
json.dumps(
|
|
{
|
|
"graylog_streams": [{"id": "66fe", "title": "Fortigate", "enabled": True}],
|
|
"graylog_stream_profiles": [{"stream_id": "66fe", "name": "66fe", "entity_field": "srcip", "categorical_fields": ["action"]}],
|
|
}
|
|
),
|
|
encoding="utf-8",
|
|
)
|
|
with patch("fgai.monitor.BaselineStore.profile_readiness", return_value=[{"stream_id": "66fe", "field": "action", "buckets": 12, "ready": True}]):
|
|
status = build_status(str(Path(tmp) / "missing.log"), baseline_path=str(Path(tmp) / "baseline.sqlite3"), config_path=str(config_path))
|
|
|
|
self.assertEqual(status["profile_readiness"][0]["stream_name"], "Fortigate")
|
|
self.assertEqual(status["profile_readiness"][0]["profile_name"], "Fortigate profile")
|
|
self.assertEqual(status["stream_profiles"][0]["name"], "Fortigate profile")
|
|
|
|
def test_stream_coverage_marks_missing_profiles(self):
|
|
with tempfile.TemporaryDirectory() as tmp:
|
|
config_path = Path(tmp) / "config.json"
|
|
config_path.write_text(
|
|
json.dumps(
|
|
{
|
|
"graylog_streams": [
|
|
{"id": "firewall", "title": "Firewall", "enabled": True},
|
|
{"id": "dns", "title": "DNS", "enabled": True},
|
|
],
|
|
"graylog_stream_profiles": [{"stream_id": "firewall", "name": "Firewall profile", "entity_field": "srcip", "categorical_fields": ["action"]}],
|
|
}
|
|
),
|
|
encoding="utf-8",
|
|
)
|
|
with patch("fgai.monitor.BaselineStore.profile_readiness", return_value=[{"stream_id": "firewall", "field": "action", "buckets": 12, "ready": True}]):
|
|
status = build_status(str(Path(tmp) / "missing.log"), baseline_path=str(Path(tmp) / "baseline.sqlite3"), config_path=str(config_path))
|
|
|
|
coverage = {item["stream_id"]: item for item in status["stream_coverage"]}
|
|
self.assertEqual(coverage["firewall"]["health"], "no_events")
|
|
self.assertEqual(coverage["firewall"]["readiness"], "1/1")
|
|
self.assertEqual(coverage["dns"]["health"], "missing_profile")
|
|
|
|
def test_add_llm_assessment_records_error_without_ollama(self):
|
|
status = {"summary": {}, "anomalies": []}
|
|
|
|
with patch("fgai.monitor.ollama_dashboard_assessment", side_effect=TimeoutError("timeout")):
|
|
add_llm_assessment(status, previous="old text")
|
|
|
|
self.assertEqual(status["llm_assessment"]["status"], "error")
|
|
self.assertEqual(status["llm_assessment"]["text"], "old text")
|
|
|
|
def test_add_llm_assessment_records_text(self):
|
|
status = {"summary": {}, "anomalies": []}
|
|
|
|
with patch("fgai.monitor.ollama_dashboard_assessment", return_value="looks noisy"):
|
|
add_llm_assessment(status)
|
|
|
|
self.assertEqual(status["llm_assessment"]["status"], "ok")
|
|
self.assertEqual(status["llm_assessment"]["text"], "looks noisy")
|
|
|
|
|
|
if __name__ == "__main__":
|
|
unittest.main()
|