def test_file_event_query_str_with_sort_key_gives_correct_json_representation( event_filter_group): file_event_query = FileEventQuery(event_filter_group) file_event_query.sort_key = "some_field_to_sort_by" json_query_str = JSON_QUERY_BASE.format("AND", event_filter_group, 1, 10000, "asc", "some_field_to_sort_by") assert str(file_event_query) == json_query_str
def _construct_query(state, begin, end, saved_search, advanced_query, or_query): if advanced_query: state.search_filters = advanced_query elif saved_search: state.search_filters = saved_search._filter_group_list else: if begin or end: state.search_filters.append( create_time_range_filter(f.EventTimestamp, begin, end)) if or_query: state.search_filters = convert_to_or_query(state.search_filters) query = FileEventQuery(*state.search_filters) query.page_size = MAX_EVENT_PAGE_SIZE query.sort_direction = "asc" query.sort_key = "insertionTimestamp" return query