Examples with FieldValue org.graylog.events.fields.FieldValue used on opensource projects

Example 6 with FieldValue

use of org.graylog.events.fields.FieldValue in project graylog2-server by Graylog2.

the class TemplateFieldValueProviderTest method templateCalculation.

@Test
@Ignore("template engine doesn't support expressions")
public void templateCalculation() {
    final TestEvent event = new TestEvent();
    final EventWithContext eventWithContext = EventWithContext.create(event, newMessage(ImmutableMap.of("bytes", 1024)));
    final FieldValue fieldValue = newTemplate("${source.bytes / 1024}").doGet("test", eventWithContext);
    assertThat(fieldValue.value()).isEqualTo("1");
}

Example 7 with FieldValue

use of org.graylog.events.fields.FieldValue in project graylog2-server by Graylog2.

the class LookupTableFieldValueProviderTest method testWithEventContext.

@Test
public void testWithEventContext() {
    final String fieldValueString = "event";
    final String expectedLookupValue = "lookup-event";
    final TestEvent event = new TestEvent();
    final TestEvent eventContext = new TestEvent();
    eventContext.setField("hello", FieldValue.string(fieldValueString));
    final EventWithContext eventWithContext = EventWithContext.create(event, eventContext);
    final LookupTableFieldValueProvider.Config config = newConfig("test", "hello");
    setupMocks("test");
    when(lookupTableFunction.lookup(fieldValueString)).thenReturn(LookupResult.single("lookup-" + eventContext.getField("hello").value()));
    final FieldValue fieldValue = newProvider(config).doGet("test", eventWithContext);
    assertThat(fieldValue.value()).isEqualTo(expectedLookupValue);
}

Example 8 with FieldValue

use of org.graylog.events.fields.FieldValue in project graylog2-server by Graylog2.

the class TemplateFieldValueProviderTest method templateNumberFormatting.

@Test
public void templateNumberFormatting() {
    final TestEvent event = new TestEvent();
    final EventWithContext eventWithContext = EventWithContext.create(event, newMessage(ImmutableMap.of("count", 10241234, "avg", 1024.42)));
    final FieldValue fieldValue = newTemplate("count: ${source.count} avg: ${source.avg}").doGet("test", eventWithContext);
    assertThat(fieldValue.value()).isEqualTo("count: 10241234 avg: 1024.42");
}

Example 9 with FieldValue

use of org.graylog.events.fields.FieldValue in project graylog2-server by Graylog2.

the class TemplateFieldValueProviderTest method templateDateFormatting.

@Test
public void templateDateFormatting() {
    final TestEvent event = new TestEvent();
    final EventWithContext eventWithContext = EventWithContext.create(event, newMessage(ImmutableMap.of("timestamp", DateTime.parse("2019-07-02T12:21:00.123Z"))));
    final FieldValue fieldValue = newTemplate("timestamp: ${source.timestamp}").doGet("test", eventWithContext);
    assertThat(fieldValue.value()).isEqualTo("timestamp: 2019-07-02T12:21:00.123Z");
}

Example 10 with FieldValue

use of org.graylog.events.fields.FieldValue in project graylog2-server by Graylog2.

the class TemplateFieldValueProviderTest method templateWithMessageContext.

@Test
public void templateWithMessageContext() {
    final TestEvent event = new TestEvent();
    final EventWithContext eventWithContext = EventWithContext.create(event, newMessage(ImmutableMap.of("hello", "world")));
    final FieldValue fieldValue = newTemplate("hello: ${source.hello}").doGet("test", eventWithContext);
    assertThat(fieldValue.value()).isEqualTo("hello: world");
}