testutil

Documentation

Index

• func CheckPantherMultiline(t *testing.T, logs string, parser parsers.LogParser, ...)
• func CheckPantherParser(t *testing.T, log string, parser parsers.LogParser, expect *parsers.PantherLog, ...)
• func CheckParserSamplesJSONL(t *testing.T, filename string, parser parsers.LogParser)
• func EqualPantherLog(t *testing.T, expectedEvent *parsers.PantherLog, events []*parsers.PantherLog, ...)
• func MustReadFileJSONLines(filename string) (lines []string)
• func MustReadFileString(filename string) string
• func NewRawMessage(jsonString string) *jsoniter.RawMessage
• type MockParser
  • func AlwaysFailParser(err error) *MockParser
  • func (p *MockParser) ParseLog(log string) ([]*parsers.Result, error)
  • func (p *MockParser) RequireLessOrEqualNumberOfCalls(t *testing.T, method string, number int)
• type ParserConfig
  • func (args ParserConfig) Parser() *MockParser

Functions

func CheckPantherMultiline

func CheckPantherMultiline(t *testing.T, logs string, parser parsers.LogParser, expect ...*parsers.PantherLog)

func CheckPantherParser

func CheckPantherParser(t *testing.T, log string, parser parsers.LogParser, expect *parsers.PantherLog, expectMore ...*parsers.PantherLog)

func CheckParserSamplesJSONL

func CheckParserSamplesJSONL(t *testing.T, filename string, parser parsers.LogParser)

func EqualPantherLog

func EqualPantherLog(t *testing.T, expectedEvent *parsers.PantherLog, events []*parsers.PantherLog, parseErr error)

For new parser tests use `CheckPantherParser` instead Used by log parsers to validate records

func MustReadFileJSONLines

func MustReadFileJSONLines(filename string) (lines []string)

func MustReadFileString

func MustReadFileString(filename string) string

func NewRawMessage

func NewRawMessage(jsonString string) *jsoniter.RawMessage

Types

type MockParser

type MockParser struct {
	mock.Mock
}

func AlwaysFailParser

func AlwaysFailParser(err error) *MockParser

func (*MockParser) ParseLog

func (p *MockParser) ParseLog(log string) ([]*parsers.Result, error)

func (*MockParser) RequireLessOrEqualNumberOfCalls

func (p *MockParser) RequireLessOrEqualNumberOfCalls(t *testing.T, method string, number int)

type ParserConfig

type ParserConfig map[string]interface{}

func (ParserConfig) Parser

func (args ParserConfig) Parser() *MockParser