Start working on a better test suite

spec/IDEAS

@@ -0,0 +1,3 @@
+* 'sample' input
+* configure filters
+* test events after filtering

spec/apache_example.rb

@@ -0,0 +1,18 @@
+require "test_utils"
+
+describe "apache common log format" do
+  extend LogStash::RSpec
+  config <<-CONFIG
+    filter {
+      grok {
+        pattern => "%{COMBINEDAPACHELOG}"
+      }
+    }
+  CONFIG
+
+  sample '198.151.8.4 - - [29/Aug/2012:20:17:38 -0400] "GET /favicon.ico HTTP/1.1" 200 3638 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:14.0) Gecko/20100101 Firefox/14.0.1"' do
+    it "should not have tag _grokparsefailure" do
+      reject { subject["@tags"] }.include?("_grokparsefailure")
+    end
+  end
+end

spec/test_utils.rb

@@ -0,0 +1,21 @@
+require "insist"
+
+module LogStash
+  module RSpec
+    def config(configstr)
+      require "logstash/config/file"
+      @config = LogStash::Config::File.new(nil, configstr)
+    end # def config
+
+    def sample(event, &block)
+      subject do
+        { 
+          "foo" => "bar",
+          "@tags" => [ "foo" ]
+        }
+      end
+      context("when processing #{event.inspect}", &block)
+    end # def sample
+  end # module RSpec
+end # module LogStash
+