Search in sources :

Example 66 with StreamRule

use of org.graylog2.plugin.streams.StreamRule in project graylog2-server by Graylog2.

the class RegexMatcherTest method testInvertedMissingFieldShouldMatch.

@Test
public void testInvertedMissingFieldShouldMatch() throws Exception {
    final StreamRule rule = getSampleRule();
    rule.setField("nonexistingfield");
    rule.setValue("^foo");
    rule.setInverted(true);
    final Message msg = getSampleMessage();
    final StreamRuleMatcher matcher = getMatcher(rule);
    assertTrue(matcher.match(msg, rule));
}
Also used : Message(org.graylog2.plugin.Message) StreamRule(org.graylog2.plugin.streams.StreamRule) Test(org.junit.Test)

Example 67 with StreamRule

use of org.graylog2.plugin.streams.StreamRule in project graylog2-server by Graylog2.

the class RegexMatcherTest method getSampleRule.

@Override
protected StreamRule getSampleRule() {
    StreamRule rule = super.getSampleRule();
    rule.setType(StreamRuleType.REGEX);
    return rule;
}
Also used : StreamRule(org.graylog2.plugin.streams.StreamRule)

Example 68 with StreamRule

use of org.graylog2.plugin.streams.StreamRule in project graylog2-server by Graylog2.

the class RegexMatcherTest method testSuccessfulComplexRegexMatch.

@Test
public void testSuccessfulComplexRegexMatch() {
    StreamRule rule = getSampleRule();
    rule.setField("some_field");
    rule.setValue("foo=^foo|bar\\d.+wat");
    Message msg = getSampleMessage();
    msg.addField("some_field", "bar1foowat");
    StreamRuleMatcher matcher = getMatcher(rule);
    assertTrue(matcher.match(msg, rule));
}
Also used : Message(org.graylog2.plugin.Message) StreamRule(org.graylog2.plugin.streams.StreamRule) Test(org.junit.Test)

Example 69 with StreamRule

use of org.graylog2.plugin.streams.StreamRule in project graylog2-server by Graylog2.

the class RegexMatcherTest method testMissedInvertedMatch.

@Test
public void testMissedInvertedMatch() {
    StreamRule rule = getSampleRule();
    rule.setValue("^foo");
    rule.setInverted(true);
    Message msg = getSampleMessage();
    msg.addField("something", "foobar");
    StreamRuleMatcher matcher = getMatcher(rule);
    assertFalse(matcher.match(msg, rule));
}
Also used : Message(org.graylog2.plugin.Message) StreamRule(org.graylog2.plugin.streams.StreamRule) Test(org.junit.Test)

Example 70 with StreamRule

use of org.graylog2.plugin.streams.StreamRule in project graylog2-server by Graylog2.

the class RegexMatcherTest method testNullFieldShouldNotMatch.

@Test
public void testNullFieldShouldNotMatch() throws Exception {
    final String fieldName = "nullfield";
    final StreamRule rule = getSampleRule();
    rule.setField(fieldName);
    rule.setValue("^foo");
    final Message msg = getSampleMessage();
    msg.addField(fieldName, null);
    final StreamRuleMatcher matcher = getMatcher(rule);
    assertFalse(matcher.match(msg, rule));
}
Also used : Message(org.graylog2.plugin.Message) StreamRule(org.graylog2.plugin.streams.StreamRule) Test(org.junit.Test)

Aggregations

StreamRule (org.graylog2.plugin.streams.StreamRule)98 Message (org.graylog2.plugin.Message)73 Test (org.junit.Test)71 Stream (org.graylog2.plugin.streams.Stream)16 ObjectId (org.bson.types.ObjectId)11 Timed (com.codahale.metrics.annotation.Timed)10 ApiOperation (io.swagger.annotations.ApiOperation)10 Output (org.graylog2.plugin.streams.Output)9 Produces (javax.ws.rs.Produces)8 AuditEvent (org.graylog2.audit.jersey.AuditEvent)8 ApiResponses (io.swagger.annotations.ApiResponses)7 Consumes (javax.ws.rs.Consumes)7 POST (javax.ws.rs.POST)7 Path (javax.ws.rs.Path)7 NotFoundException (org.graylog2.database.NotFoundException)7 URI (java.net.URI)6 Map (java.util.Map)6 AlarmCallbackConfiguration (org.graylog2.alarmcallbacks.AlarmCallbackConfiguration)6 NoAuditEvent (org.graylog2.audit.jersey.NoAuditEvent)6 AlertCondition (org.graylog2.plugin.alarms.AlertCondition)6