Skip to content

Instantly share code, notes, and snippets.

@mpurzynski
Created November 19, 2018 22:44
Show Gist options
  • Select an option

  • Save mpurzynski/a02f588f1094e02ae11aa367f5398df6 to your computer and use it in GitHub Desktop.

Select an option

Save mpurzynski/a02f588f1094e02ae11aa367f5398df6 to your computer and use it in GitHub Desktop.
removeme.txt
../tests/alerts/alert_test_suite.py:151:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
../tests/alerts/alert_test_suite.py:219: in verify_alert_task
self.verify_rabbitmq_alert(found_alert, test_case)
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
self = <test_nsm_scan_address.TestNSMScanAddress object at 0x105e27690>
found_alert = {'_id': 'AWcuJF-itQ9ZTot1eXwb', '_index': 'alerts-201811', '_score': 0.0, '_source': {'category': 'nsm', 'events': [{'...zdefhostname': 'mozdefhost', ...}, 'documenttype': 'event'}], 'ircchannel': None, 'notify_mozdefbot': False, ...}, ...}
test_case = <positive_alert_test_case.PositiveAlertTestCase object at 0x105159f90>
def verify_rabbitmq_alert(self, found_alert, test_case):
rabbitmq_message = self.rabbitmq_alerts_consumer.channel.basic_get()
rabbitmq_message.channel.basic_ack(rabbitmq_message.delivery_tag)
document = json.loads(rabbitmq_message.body)
> assert document['notify_mozdefbot'] is test_case.expected_alert['notify_mozdefbot'], 'Alert from rabbitmq has bad notify_mozdefbot field'
E AssertionError: Alert from rabbitmq has bad notify_mozdefbot field
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment