- add more insist clauses, remove nested 'it' call since we don't need

it anymore.
This commit is contained in:
Jordan Sissel 2012-08-30 03:28:25 -04:00
parent fe76c7e508
commit 60fa46f2ed

View file

@ -6,23 +6,30 @@ describe "apache common log format" do
filter {
grok {
pattern => "%{COMBINEDAPACHELOG}"
singles => true
}
}
CONFIG
sample '198.151.8.4 - - [29/Aug/2012:20:17:38 -0400] "GET /favicon.ico HTTP/1.1" 200 3638 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:14.0) Gecko/20100101 Firefox/14.0.1"' do
it "should not have tag _grokparsefailure" do
reject { subject["@tags"] }.include?("_grokparsefailure")
insist { subject }.include?("agent")
insist { subject }.include?("bytes")
insist { subject }.include?("clientip")
insist { subject }.include?("httpversion")
insist { subject }.include?("timestamp")
insist { subject }.include?("verb")
insist { subject }.include?("response")
insist { subject }.include?("request")
reject { subject["@tags"] }.include?("_grokparsefailure")
insist { subject }.include?("agent")
insist { subject }.include?("bytes")
insist { subject }.include?("clientip")
insist { subject }.include?("httpversion")
insist { subject }.include?("timestamp")
insist { subject }.include?("verb")
insist { subject }.include?("response")
insist { subject }.include?("request")
insist { subject["clientip"] } == "198.151.8.4"
end
insist { subject["clientip"] } == "198.151.8.4"
insist { subject["timestamp"] } == "29/Aug/2012:20:17:38 -0400"
insist { subject["verb"] } == "GET"
insist { subject["request"] } == "/favicon.ico"
insist { subject["httpversion"] } == "1.1"
insist { subject["response"] } == "200"
insist { subject["bytes"] } == "3638"
insist { subject["referrer"] }.nil?
insist { subject["agent"] } == "\"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:14.0) Gecko/20100101 Firefox/14.0.1\""
end
end