Migrate test_age, test_command_monitoring, and test_keep_running of test_logcollector documentation to qa-docs
#2162
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
50 tasks
1 task
…migrate-doc-logc-age-commnad-keep
added 3 commits
December 9, 2021 12:32
…n in QA Docs style
…migrate-doc-logc-age-commnad-keep
QA-docs execution
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
As part of epic #1796, this PR adds the missing documentation and migrates the current documentation to the new format used by qa-docs.
The schema used is the one defined in issue #1694
New tags
The following tags are added to the wiki:
logcollector_age,logcollector_cmd_exec, andlogcollector_keep_runningGenerated documentation
test_agetest_age_basic.json
{ "copyright": "Copyright (C) 2015-2021, Wazuh Inc.\nCreated by Wazuh, Inc. <info@wazuh.com>.\nThis program is free software; you can redistribute it and/or modify it under the terms of GPLv2", "type": "integration", "brief": "The 'wazuh-logcollector' daemon monitors configured files and commands for new log messages. Specifically, these tests will check if the 'age' option work as expected, ignoring files that have not been modified for a time greater than the 'age' value using the current date. Log data collection is the real-time process of making sense out of the records generated by servers or devices. This component can receive logs through text files or Windows event logs. It can also directly receive logs via remote syslog which is useful for firewalls and other such devices.", "tier": 0, "modules": [ "logcollector" ], "components": [ "agent", "manager" ], "daemons": [ "wazuh-logcollector" ], "os_platform": [ "linux", "windows" ], "os_version": [ "Arch Linux", "Amazon Linux 2", "Amazon Linux 1", "CentOS 8", "CentOS 7", "CentOS 6", "Ubuntu Focal", "Ubuntu Bionic", "Ubuntu Xenial", "Ubuntu Trusty", "Debian Buster", "Debian Stretch", "Debian Jessie", "Debian Wheezy", "Red Hat 8", "Red Hat 7", "Red Hat 6", "Windows 10", "Windows 8", "Windows 7", "Windows Server 2019", "Windows Server 2016", "Windows Server 2012", "Windows Server 2003", "Windows XP" ], "references": [ "https://documentation.wazuh.com/current/user-manual/capabilities/log-data-collection/index.html", "https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/localfile.html#age" ], "tags": [ "logcollector_age" ], "name": "test_age_basic.py", "id": 1, "group_id": 0, "tests": [ { "description": "Check if the 'wazuh-logcollector' daemon ignores the monitored files that have not been modified for a time greater than the value set in the 'age' tag. For this purpose, the test will create a folder with a testing log file to be monitored and configure different values for the 'age' option. Once the logcollector has started, it will wait for the event that indicates that the log file is being monitored, and depending on the 'age' value, check if the 'ignore' event is triggered or not. Finally, the test will modify the logs and verify that 'read' events are generated from ignored and not ignored files.", "wazuh_min_version": "4.2.0", "parameters": [ { "get_local_internal_options": { "type": "fixture", "brief": "Get local internal options from the module." } }, { "configure_local_internal_options": { "type": "fixture", "brief": "Configure the Wazuh local internal options." } }, { "get_files_list": { "type": "fixture", "brief": "Get file list to create from the module." } }, { "create_file_structure_function": { "type": "fixture", "brief": "Create the specified file tree structure." } }, { "get_configuration": { "type": "fixture", "brief": "Get configurations from the module." } }, { "configure_environment": { "type": "fixture", "brief": "Configure a custom environment for testing." } }, { "restart_logcollector": { "type": "fixture", "brief": "Clear the 'ossec.log' file and start a new monitor." } } ], "assertions": [ "Verify that the logcollector detects the testing log file to monitor.", "Verify that the logcollector ignores the monitored files that have not been modified for a time greater than the 'age' value.", "Verify that the logcollector does not ignore the monitored files that have been modified for a time greater than the 'age' value." ], "input_description": "A configuration template (test_age) is contained in an external YAML file (wazuh_age.yaml), which includes configuration settings for the 'wazuh-logcollector' daemon and, it is combined with the test cases (settings and files to monitor) defined in the module.", "expected_output": [ "r'New file that matches the .* pattern.*'", { "r'DEBUG": "Ignoring file .* due to modification time'" }, { "r'DEBUG": "Reading syslog message.*'" }, { "r'DEBUG": "Read .* lines from.*'" } ], "tags": [ "logs" ], "name": "test_configuration_age_basic", "inputs": [ "/tmp/wazuh_testing_age/*_syslog0", "/tmp/wazuh_testing_age/*_syslog1", "/tmp/wazuh_testing_age/*_syslog2", "/tmp/wazuh_testing_age/*_syslog3", "/tmp/wazuh_testing_age/*_syslog4" ] } ] }test_age_basic.yaml
test_age_datetime_changed.json
{ "copyright": "Copyright (C) 2015-2021, Wazuh Inc.\nCreated by Wazuh, Inc. <info@wazuh.com>.\nThis program is free software; you can redistribute it and/or modify it under the terms of GPLv2", "type": "integration", "brief": "The 'wazuh-logcollector' daemon monitors configured files and commands for new log messages. Specifically, these tests will check if the 'age' option work as expected, ignoring files that have not been modified for a time greater than the 'age' value when the system datetime is changed while the logcollector process is running. Log data collection is the real-time process of making sense out of the records generated by servers or devices. This component can receive logs through text files or Windows event logs. It can also directly receive logs via remote syslog which is useful for firewalls and other such devices.", "tier": 0, "modules": [ "logcollector" ], "components": [ "agent", "manager" ], "daemons": [ "wazuh-logcollector" ], "os_platform": [ "linux", "windows" ], "os_version": [ "Arch Linux", "Amazon Linux 2", "Amazon Linux 1", "CentOS 8", "CentOS 7", "CentOS 6", "Ubuntu Focal", "Ubuntu Bionic", "Ubuntu Xenial", "Ubuntu Trusty", "Debian Buster", "Debian Stretch", "Debian Jessie", "Debian Wheezy", "Red Hat 8", "Red Hat 7", "Red Hat 6", "Windows 10", "Windows 8", "Windows 7", "Windows Server 2019", "Windows Server 2016", "Windows Server 2012", "Windows Server 2003", "Windows XP" ], "references": [ "https://documentation.wazuh.com/current/user-manual/capabilities/log-data-collection/index.html", "https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/localfile.html#age" ], "tags": [ "logcollector_age" ], "name": "test_age_datetime_changed.py", "id": 2, "group_id": 0, "tests": [ { "description": "Check if the 'wazuh-logcollector' daemon ignores the monitored files that have not been modified for a time greater than the value set in the 'age' tag, and the system datetime is changed. For this purpose, the test will create a folder with a testing log file to be monitored and configure different values for the 'age' option. Once the logcollector has started, it will change the system datetime and wait for the event that indicates that the log file is being monitored. Finally, depending on the 'age' value, the test will verify that the 'ignore' event is triggered or not and restore the system datetime to its initial value.", "wazuh_min_version": "4.2.0", "parameters": [ { "get_local_internal_options": { "type": "fixture", "brief": "Get local internal options from the module." } }, { "configure_local_internal_options": { "type": "fixture", "brief": "Configure the Wazuh local internal options." } }, { "new_datetime": { "type": "str", "brief": "Time to forward/backward the current datetime." } }, { "get_files_list": { "type": "fixture", "brief": "Get file list to create from the module." } }, { "get_configuration": { "type": "fixture", "brief": "Get configurations from the module." } }, { "create_file_structure_function": { "type": "fixture", "brief": "Create the specified file tree structure." } }, { "configure_environment": { "type": "fixture", "brief": "Configure a custom environment for testing." } } ], "assertions": [ "Verify that the logcollector detects the testing log file to monitor.", "Verify that the logcollector ignores the monitored files that have not been modified for a time greater than the 'age' value.", "Verify that the logcollector does not ignore the monitored files that have been modified for a time greater than the 'age' value." ], "input_description": "A configuration template (test_age) is contained in an external YAML file (wazuh_age.yaml), which includes configuration settings for the 'wazuh-logcollector' daemon and, it is combined with the test cases (settings, time offset, and files to monitor) defined in the module.", "expected_output": [ "r'New file that matches the .* pattern.*'", { "r'DEBUG": "Ignoring file .* due to modification time''" } ], "tags": [ "logs", "time_travel" ], "name": "test_configuration_age_datetime", "inputs": [ "/tmp/wazuh_testing_age/*_syslog_4000s-60s", "/tmp/wazuh_testing_age/*_syslog_4000s--60s", "/tmp/wazuh_testing_age/*_syslog_4000s-30m", "/tmp/wazuh_testing_age/*_syslog_4000s--30m", "/tmp/wazuh_testing_age/*_syslog_4000s-2h", "/tmp/wazuh_testing_age/*_syslog_4000s--2h", "/tmp/wazuh_testing_age/*_syslog_4000s-43d", "/tmp/wazuh_testing_age/*_syslog_4000s--43d", "/tmp/wazuh_testing_age/*_syslog_5m-60s", "/tmp/wazuh_testing_age/*_syslog_5m--60s", "/tmp/wazuh_testing_age/*_syslog_5m-30m", "/tmp/wazuh_testing_age/*_syslog_5m--30m", "/tmp/wazuh_testing_age/*_syslog_5m-2h", "/tmp/wazuh_testing_age/*_syslog_5m--2h", "/tmp/wazuh_testing_age/*_syslog_5m-43d", "/tmp/wazuh_testing_age/*_syslog_5m--43d", "/tmp/wazuh_testing_age/*_syslog_500m-60s", "/tmp/wazuh_testing_age/*_syslog_500m--60s", "/tmp/wazuh_testing_age/*_syslog_500m-30m", "/tmp/wazuh_testing_age/*_syslog_500m--30m", "/tmp/wazuh_testing_age/*_syslog_500m-2h", "/tmp/wazuh_testing_age/*_syslog_500m--2h", "/tmp/wazuh_testing_age/*_syslog_500m-43d", "/tmp/wazuh_testing_age/*_syslog_500m--43d", "/tmp/wazuh_testing_age/*_syslog_9h-60s", "/tmp/wazuh_testing_age/*_syslog_9h--60s", "/tmp/wazuh_testing_age/*_syslog_9h-30m", "/tmp/wazuh_testing_age/*_syslog_9h--30m", "/tmp/wazuh_testing_age/*_syslog_9h-2h", "/tmp/wazuh_testing_age/*_syslog_9h--2h", "/tmp/wazuh_testing_age/*_syslog_9h-43d", "/tmp/wazuh_testing_age/*_syslog_9h--43d", "/tmp/wazuh_testing_age/*_syslog_200d-60s", "/tmp/wazuh_testing_age/*_syslog_200d--60s", "/tmp/wazuh_testing_age/*_syslog_200d-30m", "/tmp/wazuh_testing_age/*_syslog_200d--30m", "/tmp/wazuh_testing_age/*_syslog_200d-2h", "/tmp/wazuh_testing_age/*_syslog_200d--2h", "/tmp/wazuh_testing_age/*_syslog_200d-43d", "/tmp/wazuh_testing_age/*_syslog_200d--43d" ] } ] }test_age_datetime_changed.yaml
test_command_monitoringtest_command_execution_freq.json
{ "copyright": "Copyright (C) 2015-2021, Wazuh Inc.\nCreated by Wazuh, Inc. <info@wazuh.com>.\nThis program is free software; you can redistribute it and/or modify it under the terms of GPLv2", "type": "integration", "brief": "The 'wazuh-logcollector' daemon monitors configured files and commands for new log messages. Specifically, these tests will check if commands are executed at specific intervals set in the 'frequency' tag using the log formats 'command' and 'full_commnad'. Log data collection is the real-time process of making sense out of the records generated by servers or devices. This component can receive logs through text files or Windows event logs. It can also directly receive logs via remote syslog which is useful for firewalls and other such devices.", "tier": 0, "modules": [ "logcollector" ], "components": [ "agent", "manager" ], "daemons": [ "wazuh-logcollector" ], "os_platform": [ "linux", "macos", "solaris" ], "os_version": [ "Arch Linux", "Amazon Linux 2", "Amazon Linux 1", "CentOS 8", "CentOS 7", "CentOS 6", "Ubuntu Focal", "Ubuntu Bionic", "Ubuntu Xenial", "Ubuntu Trusty", "Debian Buster", "Debian Stretch", "Debian Jessie", "Debian Wheezy", "Red Hat 8", "Red Hat 7", "Red Hat 6", "macOS Catalina", "Solaris 10", "Solaris 11" ], "references": [ "https://documentation.wazuh.com/current/user-manual/capabilities/log-data-collection/index.html", "https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/localfile.html#command", "https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/localfile.html#frequency" ], "tags": [ "logcollector_cmd_exec" ], "name": "test_command_execution_freq.py", "id": 4, "group_id": 0, "tests": [ { "description": "Check if the 'wazuh-logcollector' daemon runs commands at the specified interval, set in the 'frequency' tag. For this purpose, the test will configure the logcollector to run a command at specific intervals. Then it will travel in time up to the middle of the interval set in the 'frequency' tag, and verify that the 'running' event is not been generated. That confirms that the command is not executed. Finally, the test will travel in time again up to the next interval and verify that the command is executed by detecting the 'running' event.", "wazuh_min_version": "4.2.0", "parameters": [ { "get_local_internal_options": { "type": "fixture", "brief": "Get local internal options from the module." } }, { "configure_local_internal_options": { "type": "fixture", "brief": "Configure the Wazuh local internal options." } }, { "get_configuration": { "type": "fixture", "brief": "Get configurations from the module." } }, { "configure_environment": { "type": "fixture", "brief": "Configure a custom environment for testing." } }, { "restart_logcollector": { "type": "fixture", "brief": "Clear the 'ossec.log' file and start a new monitor." } } ], "assertions": [ "Verify that the logcollector runs commands at the interval set in the 'frequency' tag.", "Verify that the logcollector does not run commands before the interval set in the 'frequency' tag expires." ], "input_description": "A configuration template (test_command_execution_freq) is contained in an external YAML file (wazuh_command_conf.yaml), which includes configuration settings for the 'wazuh-logcollector' daemon and, it is combined with the test cases (log formats, frequencies, and commands to run) defined in the module.", "expected_output": [ { "r'DEBUG": "Running .*'" } ], "tags": [ "logs", "time_travel" ], "name": "test_command_execution_freq", "inputs": [ "command_5_minutes", "command_30_minutes", "command_1_hour", "command_24_hours", "full_command_5_minutes", "full_command_30_minutes", "full_command_1_hour", "full_command_24_hours" ] } ] }test_command_execution_freq.yaml
test_command_execution.json
{ "copyright": "Copyright (C) 2015-2021, Wazuh Inc.\nCreated by Wazuh, Inc. <info@wazuh.com>.\nThis program is free software; you can redistribute it and/or modify it under the terms of GPLv2", "type": "integration", "brief": "The 'wazuh-logcollector' daemon monitors configured files and commands for new log messages. Specifically, these tests will check if commands with different characteristics are executed correctly by the logcollector. They will also check if the 'info' and 'debug' lines are written in the logs when running these commands. Log data collection is the real-time process of making sense out of the records generated by servers or devices. This component can receive logs through text files or Windows event logs. It can also directly receive logs via remote syslog which is useful for firewalls and other such devices.", "tier": 0, "modules": [ "logcollector" ], "components": [ "agent", "manager" ], "daemons": [ "wazuh-logcollector" ], "os_platform": [ "linux", "macos", "solaris" ], "os_version": [ "Arch Linux", "Amazon Linux 2", "Amazon Linux 1", "CentOS 8", "CentOS 7", "CentOS 6", "Ubuntu Focal", "Ubuntu Bionic", "Ubuntu Xenial", "Ubuntu Trusty", "Debian Buster", "Debian Stretch", "Debian Jessie", "Debian Wheezy", "Red Hat 8", "Red Hat 7", "Red Hat 6", "macOS Catalina", "Solaris 10", "Solaris 11" ], "references": [ "https://documentation.wazuh.com/current/user-manual/capabilities/log-data-collection/index.html", "https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/localfile.html#command", "https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/localfile.html#alias", "https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/localfile.html#log-format" ], "tags": [ "logcollector_cmd_exec" ], "name": "test_command_execution.py", "id": 3, "group_id": 0, "tests": [ { "description": "Check if the 'wazuh-logcollector' daemon runs commands with special characteristics. For this purpose, the test will configure the logcollector to run a command, setting it in the 'command' tag and using the 'command' and 'full_command' log formats. The properties of that command can be, for example, a non-existent command or one that includes special characters. Finally, the test will verify that the event, indicating that the command is executed, has been generated.", "wazuh_min_version": "4.2.0", "parameters": [ { "get_local_internal_options": { "type": "fixture", "brief": "Get local internal options from the module." } }, { "configure_local_internal_options": { "type": "fixture", "brief": "Configure the Wazuh local internal options." } }, { "get_configuration": { "type": "fixture", "brief": "Get configurations from the module." } }, { "configure_environment": { "type": "fixture", "brief": "Configure a custom environment for testing." } }, { "restart_logcollector": { "type": "fixture", "brief": "Clear the 'ossec.log' file and start a new monitor." } } ], "assertions": [ "Verify that the logcollector runs the command specified in the 'command' tag." ], "input_description": "A configuration template (test_command_execution) is contained in an external YAML file (wazuh_command_conf.yaml), which includes configuration settings for the 'wazuh-logcollector' daemon and, it is combined with the test cases (log formats and commands to run) defined in the module.", "expected_output": [ "r'.*wazuh-logcollector.*' (this log must indicate the command executed)" ], "tags": [ "logs" ], "name": "test_command_execution", "inputs": [ "command_empty_output", "command_check_output_and_alias", "command_not_found", "command_does not end", "command_long_output", "command_that_fails", "command_special_chars_filename", "command_special_chars_command", "command_special_chars_echo", "full_command_empty_output", "full_command_check_output_and_alias", "full_command_not_found", "full_command_does not end", "full_command_long_output", "full_command_that_fails", "full_command_special_chars_filename", "full_command_special_chars_command", "full_command_special_chars_echo", "command_killed_by_test", "full_command_killed_by_test", "command_many_arguments", "full_command_many_arguments" ] }, { "description": "Check if the 'wazuh-logcollector' daemon generates debug logs when running commands with special characteristics. For this purpose, the test will configure the logcollector to run a command, setting it in the 'command' tag and using the 'command' and 'full_command' log formats. The properties of that command can be, for example, a non-existent command or one that includes special characters. Once the logcollector has started, it will wait for the 'running' event that indicates that the command has been executed. Finally, the test will verify that the debug 'read N lines' event is generated, this event indicates the number of lines read from the command run. Depending on test case, the test also will verify that the debug event 'reading command' is generated, this event includes the output of the command run, and its alias if it is set in the 'alias' tag.", "wazuh_min_version": "4.2.0", "parameters": [ { "get_local_internal_options": { "type": "fixture", "brief": "Get local internal options from the module." } }, { "configure_local_internal_options": { "type": "fixture", "brief": "Configure the Wazuh local internal options." } }, { "get_configuration": { "type": "fixture", "brief": "Get configurations from the module." } }, { "configure_environment": { "type": "fixture", "brief": "Configure a custom environment for testing." } }, { "restart_logcollector": { "type": "fixture", "brief": "Clear the 'ossec.log' file and start a new monitor." } } ], "assertions": [ "Verify that the debug 'running' event is generated when running the command set in the 'command' tag.", "Verify that the debug 'reading command' event is generated when running the related command.", "Verify that the debug 'lines' event is generated when running the related command." ], "input_description": "A configuration template (test_command_execution) is contained in an external YAML file (wazuh_command_conf.yaml), which includes configuration settings for the 'wazuh-logcollector' daemon and, it is combined with the test cases (log formats and commands to run) defined in the module.", "expected_output": [ { "r'DEBUG": "Running .*'" }, { "r'DEBUG": "Reading command message.*'" }, "r'lines from command .*'" ], "tags": [ "logs" ], "name": "test_command_execution_dbg", "inputs": [ "command_empty_output", "command_check_output_and_alias", "command_not_found", "command_does not end", "command_long_output", "command_that_fails", "command_special_chars_filename", "command_special_chars_command", "command_special_chars_echo", "full_command_empty_output", "full_command_check_output_and_alias", "full_command_not_found", "full_command_does not end", "full_command_long_output", "full_command_that_fails", "full_command_special_chars_filename", "full_command_special_chars_command", "full_command_special_chars_echo", "command_killed_by_test", "full_command_killed_by_test", "command_many_arguments", "full_command_many_arguments" ] } ] }test_command_execution.yaml
test_keep_runningtest_keep_running.json
{ "copyright": "Copyright (C) 2015-2021, Wazuh Inc.\nCreated by Wazuh, Inc. <info@wazuh.com>.\nThis program is free software; you can redistribute it and/or modify it under the terms of GPLv2", "type": "integration", "brief": "The 'wazuh-logcollector' daemon monitors configured files and commands for new log messages. Specifically, these tests will check if the logcollector keeps running once a monitored log is rotated or truncated. Log data collection is the real-time process of making sense out of the records generated by servers or devices. This component can receive logs through text files or Windows event logs. It can also directly receive logs via remote syslog which is useful for firewalls and other such devices.", "tier": 0, "modules": [ "logcollector" ], "components": [ "agent", "manager" ], "daemons": [ "wazuh-logcollector" ], "os_platform": [ "linux", "macos", "solaris" ], "os_version": [ "Arch Linux", "Amazon Linux 2", "Amazon Linux 1", "CentOS 8", "CentOS 7", "CentOS 6", "Ubuntu Focal", "Ubuntu Bionic", "Ubuntu Xenial", "Ubuntu Trusty", "Debian Buster", "Debian Stretch", "Debian Jessie", "Debian Wheezy", "Red Hat 8", "Red Hat 7", "Red Hat 6", "macOS Catalina", "Solaris 10", "Solaris 11" ], "references": [ "https://documentation.wazuh.com/current/user-manual/capabilities/log-data-collection/index.html", "https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/localfile.html" ], "tags": [ "logcollector_keep_running" ], "name": "test_keep_running.py", "id": 5, "group_id": 0, "tests": [ { "description": "Check if the 'wazuh-logcollector' daemon keeps running once a log is rotated or truncated. For this purpose, the test will create a testing log file and configure a 'localfile' section to monitor it. Then, it will verify that the log is monitored, add data to it, and verify that the data addition is detected. After this, the test will rotate or truncate (depending on the test case) the log file, and check if an event indicating that the inode of the monitored log is changed has been generated (rotate), or an event indicating that the size of that log is reduced (truncate). Finally, the test will add more data to the rotated/truncated log and verify that event indicating the data addition is detected.", "wazuh_min_version": "4.2.0", "parameters": [ { "get_local_internal_options": { "type": "fixture", "brief": "Get local internal options from the module." } }, { "configure_local_internal_options": { "type": "fixture", "brief": "Configure the Wazuh local internal options." } }, { "get_configuration": { "type": "fixture", "brief": "Get configurations from the module." } }, { "configure_environment": { "type": "fixture", "brief": "Configure a custom environment for testing." } }, { "create_file_structure_module": { "type": "fixture", "brief": "Create the specified file tree structure." } }, { "restart_logcollector": { "type": "fixture", "brief": "Clear the 'ossec.log' file and start a new monitor." } } ], "assertions": [ "Verify that the logcollector detects data addition on a monitored log file after and before of the log rotation/truncation..", "Verify that the logcollector detects the log rotation by detecting changes on its inode.", "Verify that the logcollector detects the log truncation by detecting changes in its size." ], "input_description": "A configuration template (test_keep_running) is contained in an external YAML file (wazuh_keep_running_conf.yaml). That template is combined with two test cases defined in the module. Those include configuration settings for the 'wazuh-logcollector' daemon.", "expected_output": [ "r'Analyzing file.*'", "r'Reading syslog message'", "r'File inode changed.' (when the monitored log file is rotated)", "r'File size reduced.' (when the monitored log file is truncated)" ], "tags": [ "logs" ], "name": "test_keep_running", "inputs": [ "rotate_/tmp/wazuh-testing/test_log.log_in_syslog_format", "truncate_/tmp/wazuh-testing/test_log.log_in_syslog_format" ] } ] }test_keep_running.yaml
Tests
pycodestyle --max-line-length=120 --show-source --show-pep8 file.py.python3 DocGenerator.py -s