diff --git a/tests/parsers/apt_history.py b/tests/parsers/apt_history.py index 8c8ba3a437..d6428cc28a 100644 --- a/tests/parsers/apt_history.py +++ b/tests/parsers/apt_history.py @@ -217,6 +217,21 @@ def testParseLog(self): self._TestGetMessageStrings( event_data, expected_message, expected_short_message) + def testParseLogWithTimeZone(self): + """Tests the Parse function on apt_history.log with a time zone.""" + parser = apt_history.APTHistoryLogParser() + storage_writer = self._ParseFile( + ['apt_history.log'], parser, timezone='CET') + + self.assertEqual(storage_writer.number_of_warnings, 0) + self.assertEqual(storage_writer.number_of_events, 10) + + events = list(storage_writer.GetEvents()) + + event = events[0] + + self.CheckTimestamp(event.timestamp, '2019-07-10 14:38:08.000000') + def testParseInvalidLog(self): """Tests the Parse function on a non APT History log.""" parser = apt_history.APTHistoryLogParser() diff --git a/tests/parsers/setupapi.py b/tests/parsers/setupapi.py index 3b6dbf3662..f1a9ac258e 100644 --- a/tests/parsers/setupapi.py +++ b/tests/parsers/setupapi.py @@ -132,6 +132,21 @@ def testParseSetupLog(self): self._TestGetMessageStrings( event_data, expected_message, expected_short_message) + def testParseSetupLogWithTimeZone(self): + """Tests the Parse function on setupapi.setup.log with a time zone.""" + parser = setupapi.SetupapiLogParser() + storage_writer = self._ParseFile( + ['setupapi.setup.log'], parser, timezone='CET') + + self.assertEqual(storage_writer.number_of_warnings, 0) + self.assertEqual(storage_writer.number_of_events, 32) + + events = list(storage_writer.GetEvents()) + + event = events[0] + + self.CheckTimestamp(event.timestamp, '2015-11-22 16:53:16.599000') + if __name__ == '__main__': unittest.main() diff --git a/tests/parsers/sophos_av.py b/tests/parsers/sophos_av.py index 581fb0e992..9ce5af34c3 100644 --- a/tests/parsers/sophos_av.py +++ b/tests/parsers/sophos_av.py @@ -37,6 +37,20 @@ def testParse(self): self._TestGetMessageStrings( event_data, expected_message, expected_short_message) + def testParseWithTimeZone(self): + """Tests the Parse function with a time zone.""" + parser = sophos_av.SophosAVLogParser() + storage_writer = self._ParseFile(['sav.txt'], parser, timezone='CET') + + self.assertEqual(storage_writer.number_of_warnings, 0) + self.assertEqual(storage_writer.number_of_events, 9) + + events = list(storage_writer.GetEvents()) + + event = events[0] + + self.CheckTimestamp(event.timestamp, '2010-07-20 16:38:14.000000') + if __name__ == '__main__': unittest.main() diff --git a/tests/parsers/syslog.py b/tests/parsers/syslog.py index c304592c28..216d4a7d2d 100644 --- a/tests/parsers/syslog.py +++ b/tests/parsers/syslog.py @@ -36,6 +36,18 @@ def testParseRsyslogTraditional(self): self.assertEqual(storage_writer.number_of_warnings, 0) self.assertEqual(storage_writer.number_of_events, 8) + events = list(storage_writer.GetSortedEvents()) + + event = events[0] + + self.CheckTimestamp(event.timestamp, '2016-01-22 07:54:32.000000') + + event_data = self._GetEventDataOfEvent(storage_writer, event) + self.assertEqual(event_data.data_type, 'syslog:line') + self.assertEqual(event_data.hostname, 'myhostname.myhost.com') + self.assertEqual(event_data.reporter, 'Job') + self.assertIsNone(event_data.severity) + def testParseDarwin(self): """Tests the Parse function on an Darwin-style syslog file.""" parser = syslog.SyslogParser() @@ -203,6 +215,29 @@ def testParse(self): self.assertEqual(storage_writer.number_of_warnings, 2) self.assertEqual(storage_writer.number_of_events, 15) + def testParseWithTimeZone(self): + """Tests the Parse function with a time zone.""" + parser = syslog.SyslogParser() + knowledge_base_values = {'year': 2016} + storage_writer = self._ParseFile( + ['syslog_rsyslog_traditional'], parser, + knowledge_base_values=knowledge_base_values, timezone='CET') + + self.assertEqual(storage_writer.number_of_warnings, 0) + self.assertEqual(storage_writer.number_of_events, 8) + + events = list(storage_writer.GetSortedEvents()) + + event = events[0] + + self.CheckTimestamp(event.timestamp, '2016-01-22 06:54:32.000000') + + event_data = self._GetEventDataOfEvent(storage_writer, event) + self.assertEqual(event_data.data_type, 'syslog:line') + self.assertEqual(event_data.hostname, 'myhostname.myhost.com') + self.assertEqual(event_data.reporter, 'Job') + self.assertIsNone(event_data.severity) + if __name__ == '__main__': unittest.main() diff --git a/tests/parsers/vsftpd.py b/tests/parsers/vsftpd.py index a633b8ca21..5690501c38 100644 --- a/tests/parsers/vsftpd.py +++ b/tests/parsers/vsftpd.py @@ -39,6 +39,20 @@ def testParse(self): self._TestGetMessageStrings( event_data, expected_message, expected_short_message) + def testParseWithTimeZone(self): + """Tests the Parse function with a time zone.""" + parser = vsftpd.VsftpdLogParser() + storage_writer = self._ParseFile(['vsftpd.log'], parser, timezone='CET') + + self.assertEqual(storage_writer.number_of_warnings, 0) + self.assertEqual(storage_writer.number_of_events, 25) + + events = list(storage_writer.GetEvents()) + + event = events[12] + + self.CheckTimestamp(event.timestamp, '2016-06-10 12:24:19.000000') + if __name__ == '__main__': unittest.main() diff --git a/tests/parsers/winfirewall.py b/tests/parsers/winfirewall.py index b69b32dfe4..f73b3bf874 100644 --- a/tests/parsers/winfirewall.py +++ b/tests/parsers/winfirewall.py @@ -61,6 +61,20 @@ def testParse(self): self.assertEqual(event_data.icmp_type, 8) self.assertEqual(event_data.icmp_code, 0) + def testParseWithTimeZone(self): + """Tests the Parse function with a time zone.""" + parser = winfirewall.WinFirewallParser() + storage_writer = self._ParseFile(['firewall.log'], parser, timezone='CET') + + self.assertEqual(storage_writer.number_of_warnings, 0) + self.assertEqual(storage_writer.number_of_events, 15) + + events = list(storage_writer.GetSortedEvents()) + + event = events[4] + + self.CheckTimestamp(event.timestamp, '2005-04-11 06:06:02.000000') + if __name__ == '__main__': unittest.main() diff --git a/tests/parsers/xchatlog.py b/tests/parsers/xchatlog.py index c2bb7bc11b..e67a782441 100644 --- a/tests/parsers/xchatlog.py +++ b/tests/parsers/xchatlog.py @@ -17,6 +17,22 @@ class XChatLogUnitTest(test_lib.ParserTestCase): def testParse(self): """Tests the Parse function.""" parser = xchatlog.XChatLogParser() + storage_writer = self._ParseFile(['xchat.log'], parser) + + self.assertEqual(storage_writer.number_of_warnings, 1) + self.assertEqual(storage_writer.number_of_events, 9) + + events = list(storage_writer.GetEvents()) + + expected_event_values = { + 'text': 'XChat start logging', + 'timestamp': '2011-12-31 21:11:55.000000'} + + self.CheckEventValues(storage_writer, events[0], expected_event_values) + + def testParseWithTimeZone(self): + """Tests the Parse function with a time zone.""" + parser = xchatlog.XChatLogParser() storage_writer = self._ParseFile( ['xchat.log'], parser, timezone='Europe/Rome')