def test_get_remote_data_command_6_1_and_higher(mocker, params, offense: Dict, enriched_offense,
expected: GetRemoteDataResponse):
"""
Given:
- QRadar client.
- Demisto params.
- Demisto arguments.
When:
- Case a: Offense updated, not closed, no events.
- Case b: Offense updated, closed, no events, close_incident is false.
- Case c: Offense updated, closed, no events, close_incident is true.
Then:
- Case a: Ensure that offense is returned as is.
- Case b: Ensure that offense is returned as is.
- Case c: Ensure that offense is returned, along with expected entries.
"""
set_integration_context({'last_update': 1})
mocker.patch.object(client, 'offenses_list', return_value=offense)
mocker.patch.object(QRadar_v3, 'enrich_offenses_result', return_value=enriched_offense)
if 'close_incident' in params:
mocker.patch.object(client, 'closing_reasons_list',
return_value=command_test_data['closing_reasons_list']['response'][0])
result = get_remote_data_command(client, params, {'id': offense.get('id'), 'lastUpdate': 1})
assert result.mirrored_object == expected.mirrored_object
assert result.entries == expected.entries
def test_get_remote_data_command_pre_6_1(mocker, params, args,
expected: GetRemoteDataResponse):
"""
Given:
- QRadar client.
- Demisto arguments.
When:
- Command 'get-get-remote-data' is being called.
Then:
- Ensure that command outputs the IDs of the offenses to update.
"""
set_integration_context(dict())
enriched_response = command_test_data['get_remote_data'][
'enrich_offenses_result']
mocker.patch.object(
client,
'offenses_list',
return_value=command_test_data['get_remote_data']['response'])
mocker.patch.object(QRadar_v3,
'enrich_offenses_result',
return_value=enriched_response)
result = get_remote_data_command(client, params, args)
assert result.mirrored_object == expected.mirrored_object
assert result.entries == expected.entries