mirror of
https://github.com/elastic/logstash.git
synced 2025-04-24 06:37:19 -04:00
- add more insist clauses, remove nested 'it' call since we don't need
it anymore.
This commit is contained in:
parent
fe76c7e508
commit
60fa46f2ed
1 changed files with 19 additions and 12 deletions
|
@ -6,23 +6,30 @@ describe "apache common log format" do
|
|||
filter {
|
||||
grok {
|
||||
pattern => "%{COMBINEDAPACHELOG}"
|
||||
singles => true
|
||||
}
|
||||
}
|
||||
CONFIG
|
||||
|
||||
sample '198.151.8.4 - - [29/Aug/2012:20:17:38 -0400] "GET /favicon.ico HTTP/1.1" 200 3638 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:14.0) Gecko/20100101 Firefox/14.0.1"' do
|
||||
it "should not have tag _grokparsefailure" do
|
||||
reject { subject["@tags"] }.include?("_grokparsefailure")
|
||||
insist { subject }.include?("agent")
|
||||
insist { subject }.include?("bytes")
|
||||
insist { subject }.include?("clientip")
|
||||
insist { subject }.include?("httpversion")
|
||||
insist { subject }.include?("timestamp")
|
||||
insist { subject }.include?("verb")
|
||||
insist { subject }.include?("response")
|
||||
insist { subject }.include?("request")
|
||||
reject { subject["@tags"] }.include?("_grokparsefailure")
|
||||
insist { subject }.include?("agent")
|
||||
insist { subject }.include?("bytes")
|
||||
insist { subject }.include?("clientip")
|
||||
insist { subject }.include?("httpversion")
|
||||
insist { subject }.include?("timestamp")
|
||||
insist { subject }.include?("verb")
|
||||
insist { subject }.include?("response")
|
||||
insist { subject }.include?("request")
|
||||
|
||||
insist { subject["clientip"] } == "198.151.8.4"
|
||||
end
|
||||
insist { subject["clientip"] } == "198.151.8.4"
|
||||
insist { subject["timestamp"] } == "29/Aug/2012:20:17:38 -0400"
|
||||
insist { subject["verb"] } == "GET"
|
||||
insist { subject["request"] } == "/favicon.ico"
|
||||
insist { subject["httpversion"] } == "1.1"
|
||||
insist { subject["response"] } == "200"
|
||||
insist { subject["bytes"] } == "3638"
|
||||
insist { subject["referrer"] }.nil?
|
||||
insist { subject["agent"] } == "\"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:14.0) Gecko/20100101 Firefox/14.0.1\""
|
||||
end
|
||||
end
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue