def test_freq_terms():
rules = {'num_events': 10,
'timeframe': datetime.timedelta(hours=1),
'query_key': 'username'}
rule = FrequencyRule(rules)
terms1 = {ts_to_dt('2014-01-01T00:01:00Z'): [{'key': 'userA', 'doc_count': 1},
{'key': 'userB', 'doc_count': 5}]}
terms2 = {ts_to_dt('2014-01-01T00:10:00Z'): [{'key': 'userA', 'doc_count': 8},
{'key': 'userB', 'doc_count': 5}]}
terms3 = {ts_to_dt('2014-01-01T00:25:00Z'): [{'key': 'userA', 'doc_count': 3},
{'key': 'userB', 'doc_count': 0}]}
# Initial data
rule.add_terms_data(terms1)
assert len(rule.matches) == 0
# Match for user B
rule.add_terms_data(terms2)
assert len(rule.matches) == 1
assert rule.matches[0].get('username') == 'userB'
# Match for user A
rule.add_terms_data(terms3)
assert len(rule.matches) == 2
assert rule.matches[1].get('username') == 'userA'
def test_freq_terms():
rules = {"num_events": 10, "timeframe": datetime.timedelta(hours=1), "query_key": "username"}
rule = FrequencyRule(rules)
terms1 = {ts_to_dt("2014-01-01T00:01:00Z"): [{"key": "userA", "doc_count": 1}, {"key": "userB", "doc_count": 5}]}
terms2 = {ts_to_dt("2014-01-01T00:10:00Z"): [{"key": "userA", "doc_count": 8}, {"key": "userB", "doc_count": 5}]}
terms3 = {ts_to_dt("2014-01-01T00:25:00Z"): [{"key": "userA", "doc_count": 3}, {"key": "userB", "doc_count": 0}]}
# Initial data
rule.add_terms_data(terms1)
assert len(rule.matches) == 0
# Match for user B
rule.add_terms_data(terms2)
assert len(rule.matches) == 1
assert rule.matches[0].get("username") == "userB"
# Match for user A
rule.add_terms_data(terms3)
assert len(rule.matches) == 2
assert rule.matches[1].get("username") == "userA"
