modification in test

Author: “deep-splunk”

test/conftest.py

@@ -69,7 +69,7 @@ def pytest_configure():
         producer.send(config["kafka_header_topic"], msg, headers=headers_to_send)
     producer.send("test_splunk_hec_malformed_events", {})
     producer.send("test_splunk_hec_malformed_events", {"&&": "null", "message": ["$$$$****////", 123, None]})
-    producer.send("record_key",{"timestamp": config['timestamp']},bytes("record_key_test", 'utf-8'))
+    producer.send("record_key",{"timestamp": config['timestamp']},b"{}")
     protobuf_producer.send("prototopic",value=b'\x00\x00\x00\x00\x01\x00\n\x011\x12\r10-01-04-3:45\x18\x15%\x00\x00*C*\x02No:\x12\n\x011\x12\x04this\x1a\x07New oneB\x0c\n\x011\x12\x07shampooJ\x04Many')
     timestamp_producer.send("date_format",b"{\"id\": \"19\",\"host\":\"host-01\",\"source\":\"bu\",\"fields\":{\"hn\":\"hostname\",\"CLASS\":\"class\",\"cust_id\":\"000013934\",\"time\": \"Jun 13 2010 23:11:52.454 UTC\",\"category\":\"IFdata\",\"ifname\":\"LoopBack7\",\"IFdata.Bits received\":\"0\",\"IFdata.Bits sent\":\"0\"}")
     timestamp_producer.send("epoch_format",b"{\"id\": \"19\",\"host\":\"host-01\",\"source\":\"bu\",\"fields\":{\"hn\":\"hostname\",\"CLASS\":\"class\",\"cust_id\":\"000013934\",\"time\": \"1555209605000\",\"category\":\"IFdata\",\"ifname\":\"LoopBack7\",\"IFdata.Bits received\":\"0\",\"IFdata.Bits sent\":\"0\"}")

test/testcases/test_data_enrichment.py

@@ -61,11 +61,11 @@ def test_line_breaking_configuration(self, setup, test_case, test_input, expecte
                 f'\nActual value: \n{actual_raw_data} \ndoes not match expected value: \n{expected_data}'
 
     @pytest.mark.parametrize("test_scenario, test_input, expected", [
-        ("record_key_extraction", "sourcetype::track_record_key", "record_key_test"),
+        ("record_key_extraction", "sourcetype::track_record_key", "{}"),
     ])
     def test_record_key_data_enrichment(self, setup, test_scenario, test_input, expected):
         logger.info(f"testing {test_scenario} input={test_input} expected={expected} event(s)")
-        search_query = f"index={setup['splunk_index']} | search {test_input}"
+        search_query = f"index={setup['splunk_index']} | search {test_input} | fields *"
         logger.info(search_query)
         events = check_events_from_splunk(start_time="-15m@m",
                                           url=setup["splunkd_url"],
@@ -75,6 +75,6 @@ def test_record_key_data_enrichment(self, setup, test_scenario, test_input, expe
         logger.info("Splunk received %s events in the last hour", len(events))
 
         if(len(events)==1):
-           assert events[0]["fields"]["kafka_record_key"] == expected 
+           assert events[0]["kafka_record_key"] == expected 
         else:
             assert False,"No event found or duplicate events found"