def test_sudden_appearance_detect_no_outlier_es_check(self): # Generate documents dummy_doc_generate = DummyDocumentsGenerate() list_delta_hour = [1, 1, 1, 3, 3, 3, 4, 5, 5, 5, 15, 15] field_1_name = "user_id" list_field_1_value = [1, 2, 1, 2, 1, 2, 1, 2, 1, 2, 1, 2] field_2_name = "hostname" list_field_2_value = [] for _ in range(len(list_delta_hour)): list_field_2_value.append("host1") generated_docs = dummy_doc_generate.generate_doc_time_variable_witt_custom_fields( list_delta_hour, field_1_name, list_field_1_value, field_2_name, list_field_2_value) self.test_es.add_multiple_docs(generated_docs) # Run analyzer self.test_settings.change_configuration_path(test_conf_file_01) analyzer = AnalyzerFactory.create( root_test_use_case_files + "sudden_appearance_dummy_test_02.conf") set_new_current_date(analyzer) analyzer.evaluate_model() nbr_outliers = 0 for elem in es._scan(): if "outliers" in elem["_source"]: nbr_outliers += 1 self.assertEqual(nbr_outliers, 0)
def test_sudden_extra_outlier_infos_all_present(self): # Generate documents dummy_doc_generate = DummyDocumentsGenerate() list_delta_hour = [1, 1, 1, 1, 1, 1, 1, 1, 2, 2, 1, 15] field_1_name = "user_id" list_field_1_value = [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] field_2_name = "hostname" list_field_2_value = [] for _ in range(len(list_delta_hour)): list_field_2_value.append("host1") generated_docs = dummy_doc_generate.generate_doc_time_variable_witt_custom_fields( list_delta_hour, field_1_name, list_field_1_value, field_2_name, list_field_2_value) self.test_es.add_multiple_docs(generated_docs) self.test_settings.change_configuration_path(test_conf_file_01) analyzer = AnalyzerFactory.create( root_test_use_case_files + "sudden_appearance_dummy_test_03.conf") set_new_current_date(analyzer) analyzer.evaluate_model() list_outlier = list() for elem in es._scan(): if "outliers" in elem["_source"]: list_outlier.append(elem) all_fields_exists = [ elem in EXTRA_OUTLIERS_KEY_FIELDS + DEFAULT_OUTLIERS_KEY_FIELDS for elem in list_outlier[0]['_source']['outliers'] ] self.assertTrue(all(all_fields_exists))