def testFormatDateTime(self):
"""Tests the _FormatDateTime function."""
output_mediator = self._CreateOutputMediator()
test_helper = formatting_helper.FieldFormattingHelper(output_mediator)
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[0]))
# Test with event.date_time
date_time_string = test_helper._FormatDateTime(event, event_data,
event_data_stream)
self.assertEqual(date_time_string, '2012-06-27T18:17:01.000000+00:00')
# Test with event.timestamp
event.date_time = None
date_time_string = test_helper._FormatDateTime(event, event_data,
event_data_stream)
self.assertEqual(date_time_string, '2012-06-27T18:17:01+00:00')
event.timestamp = 0
date_time_string = test_helper._FormatDateTime(event, event_data,
event_data_stream)
self.assertEqual(date_time_string, '0000-00-00T00:00:00+00:00')
event.timestamp = -9223372036854775808
date_time_string = test_helper._FormatDateTime(event, event_data,
event_data_stream)
self.assertEqual(date_time_string, '0000-00-00T00:00:00+00:00')
def testFormatTime(self):
"""Tests the _FormatTime function."""
output_mediator = self._CreateOutputMediator()
test_helper = formatting_helper.FieldFormattingHelper(output_mediator)
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[0]))
# Test with event.date_time
time_string = test_helper._FormatTime(event, event_data,
event_data_stream)
self.assertEqual(time_string, '18:17:01')
# Test with event.timestamp
event.date_time = None
time_string = test_helper._FormatTime(event, event_data,
event_data_stream)
self.assertEqual(time_string, '18:17:01')
event.timestamp = 0
time_string = test_helper._FormatTime(event, event_data,
event_data_stream)
self.assertEqual(time_string, '--:--:--')
event.timestamp = -9223372036854775808
time_string = test_helper._FormatTime(event, event_data,
event_data_stream)
self.assertEqual(time_string, '--:--:--')
def testFormatTime(self):
"""Tests the _FormatTime function."""
output_mediator = self._CreateOutputMediator()
test_helper = formatting_helper.FieldFormattingHelper(output_mediator)
# Test with event.date_time
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[0]))
time_string = test_helper._FormatTime(event, event_data,
event_data_stream)
self.assertEqual(time_string, '18:17:01')
output_mediator.SetTimeZone('Europe/Amsterdam')
time_string = test_helper._FormatTime(event, event_data,
event_data_stream)
self.assertEqual(time_string, '20:17:01')
output_mediator.SetTimeZone('UTC')
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[1]))
event.date_time._time_zone_offset = 120
time_string = test_helper._FormatTime(event, event_data,
event_data_stream)
self.assertEqual(time_string, '18:17:01')
# Test with event.is_local_time
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[0]))
event.timestamp -= 120 * 60 * 1000000
event.date_time.is_local_time = True
time_string = test_helper._FormatTime(event, event_data,
event_data_stream)
self.assertEqual(time_string, '16:17:01')
# Test with event.timestamp
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[0]))
event.date_time = None
time_string = test_helper._FormatTime(event, event_data,
event_data_stream)
self.assertEqual(time_string, '18:17:01')
event.timestamp = 0
time_string = test_helper._FormatTime(event, event_data,
event_data_stream)
self.assertEqual(time_string, '--:--:--')
event.timestamp = -9223372036854775808
time_string = test_helper._FormatTime(event, event_data,
event_data_stream)
self.assertEqual(time_string, '--:--:--')
def testFormatMACB(self):
"""Tests the _FormatMACB function."""
output_mediator = self._CreateOutputMediator()
test_helper = formatting_helper.FieldFormattingHelper(output_mediator)
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[0]))
macb_string = test_helper._FormatMACB(event, event_data, event_data_stream)
self.assertEqual(macb_string, '..C.')
def __init__(self, output_mediator):
"""Initializes a dynamic selected delimiter separated values output module.
Args:
output_mediator (OutputMediator): an output mediator.
"""
super(TestXMLEventFormattingHelper, self).__init__(output_mediator)
self._field_formatting_helper = formatting_helper.FieldFormattingHelper(
output_mediator)
def testFormatFilename(self):
"""Tests the _FormatFilename function."""
output_mediator = self._CreateOutputMediator()
test_helper = formatting_helper.FieldFormattingHelper(output_mediator)
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[0]))
filename_string = test_helper._FormatFilename(event, event_data,
event_data_stream)
self.assertEqual(filename_string, 'log/syslog.1')
def testGetFormattedField(self):
"""Tests the GetFormattedField function."""
output_mediator = self._CreateOutputMediator()
test_helper = formatting_helper.FieldFormattingHelper(output_mediator)
test_helper._FIELD_FORMAT_CALLBACKS = {'zone': '_FormatTimeZone'}
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[0]))
zone_string = test_helper.GetFormattedField('zone', event, event_data,
event_data_stream, None)
self.assertEqual(zone_string, 'UTC')
def testFormatSourceShort(self):
"""Tests the _FormatSourceShort function."""
output_mediator = self._CreateOutputMediator()
test_helper = formatting_helper.FieldFormattingHelper(output_mediator)
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[0]))
source_short_string = test_helper._FormatSourceShort(
event, event_data, event_data_stream)
self.assertEqual(source_short_string, 'FILE')
def testFormatTag(self):
"""Tests the _FormatTag function."""
output_mediator = self._CreateOutputMediator()
test_helper = formatting_helper.FieldFormattingHelper(output_mediator)
tag_string = test_helper._FormatTag(None)
self.assertEqual(tag_string, '-')
event_tag = events.EventTag()
event_tag.AddLabel('one')
event_tag.AddLabel('two')
tag_string = test_helper._FormatTag(event_tag)
self.assertEqual(tag_string, 'one two')
def testFormatDateTime(self):
"""Tests the _FormatDateTime function with dynamic time."""
output_mediator = self._CreateOutputMediator(dynamic_time=True)
test_helper = formatting_helper.FieldFormattingHelper(output_mediator)
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[0]))
date_time_string = test_helper._FormatDateTime(event, event_data,
event_data_stream)
self.assertEqual(date_time_string, '2012-06-27T18:17:01.000000+00:00')
output_mediator.SetTimeZone('Europe/Amsterdam')
date_time_string = test_helper._FormatDateTime(event, event_data,
event_data_stream)
self.assertEqual(date_time_string, '2012-06-27T20:17:01.000000+02:00')
output_mediator.SetTimeZone('UTC')
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[1]))
event.date_time._time_zone_offset = 120
date_time_string = test_helper._FormatDateTime(event, event_data,
event_data_stream)
self.assertEqual(date_time_string, '2012-06-27T18:17:01.000000+00:00')
event.date_time = dfdatetime_semantic_time.InvalidTime()
date_time_string = test_helper._FormatDateTime(event, event_data,
event_data_stream)
self.assertEqual(date_time_string, 'Invalid')
# Test with event.is_local_time
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[0]))
event.timestamp -= 120 * 60 * 1000000
event.date_time.is_local_time = True
date_time_string = test_helper._FormatDateTime(event, event_data,
event_data_stream)
self.assertEqual(date_time_string, '2012-06-27T16:17:01.000000+00:00')
def testFormatSource(self):
"""Tests the _FormatSource function."""
output_mediator = self._CreateOutputMediator()
test_helper = formatting_helper.FieldFormattingHelper(output_mediator)
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[0]))
formatters_manager.FormattersManager.RegisterFormatter(
formatters_test_lib.TestEventFormatter)
try:
source_string = test_helper._FormatSource(event, event_data,
event_data_stream)
finally:
formatters_manager.FormattersManager.DeregisterFormatter(
formatters_test_lib.TestEventFormatter)
self.assertEqual(source_string, 'Test log file')
def testFormatMessageShort(self):
"""Tests the _FormatMessageShort function."""
output_mediator = self._CreateOutputMediator()
formatters_directory_path = self._GetTestFilePath(['formatters'])
output_mediator.ReadMessageFormattersFromDirectory(
formatters_directory_path)
test_helper = formatting_helper.FieldFormattingHelper(output_mediator)
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[0]))
message_short_string = test_helper._FormatMessageShort(
event, event_data, event_data_stream)
expected_message_short_string = (
'Reporter <CRON> PID: 8442 (pam_unix(cron:session): session closed '
'for user root)')
self.assertEqual(message_short_string, expected_message_short_string)
def testFormatMessageShort(self):
"""Tests the _FormatMessageShort function."""
output_mediator = self._CreateOutputMediator()
test_helper = formatting_helper.FieldFormattingHelper(output_mediator)
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[0]))
formatters_manager.FormattersManager.RegisterFormatter(
formatters_test_lib.TestEventFormatter)
try:
message_short_string = test_helper._FormatMessageShort(
event, event_data, event_data_stream)
finally:
formatters_manager.FormattersManager.DeregisterFormatter(
formatters_test_lib.TestEventFormatter)
expected_message_short_string = (
'Reporter <CRON> PID: 8442 (pam_unix(cron:session): session closed '
'for user root)')
self.assertEqual(message_short_string, expected_message_short_string)
def testFormatTimeZone(self):
"""Tests the _FormatTimeZone function."""
output_mediator = self._CreateOutputMediator()
test_helper = formatting_helper.FieldFormattingHelper(output_mediator)
# Test with event.date_time
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[0]))
zone_string = test_helper._FormatTimeZone(event, event_data,
event_data_stream)
self.assertEqual(zone_string, 'UTC')
output_mediator.SetTimeZone('Europe/Amsterdam')
zone_string = test_helper._FormatTimeZone(event, event_data,
event_data_stream)
self.assertEqual(zone_string, 'CEST')
output_mediator.SetTimeZone('UTC')
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[1]))
event.date_time._time_zone_offset = 120
zone_string = test_helper._FormatTimeZone(event, event_data,
event_data_stream)
self.assertEqual(zone_string, 'UTC')
# Test with event.is_local_time
event, event_data, event_data_stream = (
containers_test_lib.CreateEventFromValues(self._TEST_EVENTS[0]))
event.timestamp -= 120 * 60 * 1000000
event.date_time.is_local_time = True
zone_string = test_helper._FormatTimeZone(event, event_data,
event_data_stream)
self.assertEqual(zone_string, 'UTC')