From 2842b88046e81c3c308619b71da09c244bfc9267 Mon Sep 17 00:00:00 2001 From: rfaircloth-splunk Date: Thu, 14 May 2020 18:15:49 -0400 Subject: [PATCH] Remove extra test --- tests/test_checkpoint.py | 37 ------------------------------------- 1 file changed, 37 deletions(-) diff --git a/tests/test_checkpoint.py b/tests/test_checkpoint.py index 998748d..873c050 100644 --- a/tests/test_checkpoint.py +++ b/tests/test_checkpoint.py @@ -121,43 +121,6 @@ def test_checkpoint_splunk_firewall_noise( assert resultCount == 1 -def test_checkpoint_splunk_firewall_noise2( - record_property, setup_wordlist, setup_splunk, setup_sc4s -): - host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist)) - - dt = datetime.datetime.now() - iso, bsd, time, date, tzoffset, tzname, epoch = time_operations(dt) - - # Tune time functions for Checkpoint - epoch = epoch[:-7] - - mt = env.from_string( - "{{ mark }} {{ bsd }} {{ host }} time={{ epoch }}|hostname={{ host }}|product=Firewall|action=Drop|ifdir=inbound|ifname=bond1|loguid={{ host }}{0x5d9ce80f,0x8d0555,0x5f19f392,0x18982828}|origin=1.1.1.1|time={{ epoch }}|version=1|chassis_bladed_system=[ 1_1 ]|dst=10.10.10.10|inzone=External|origin_sic_name=CN=something_03_local,O=devicename.domain.com.p7fdbt|outzone=Internal|proto=6|rule=402|rule_name=11:..|rule_uid={C8CD796E-7BD5-47B6-90CA-B250D062D5E5}|s_port=33687|service=23|src=1.1.1.2|\n" - ) - message = mt.render(mark="<111>", host=host, bsd=bsd, epoch=epoch) - - sendsingle(message, setup_sc4s[0], setup_sc4s[1][514]) - sleep(10) - sendsingle(message, setup_sc4s[0], setup_sc4s[1][514]) - sendsingle(message, setup_sc4s[0], setup_sc4s[1][514]) - - st = env.from_string( - 'search _time={{ epoch }} index=netfw host="{{ host }}" sourcetype="cp_log"' - ) - search = st.render( - epoch=epoch, bsd=bsd, host=host, date=date, time=time, tzoffset=tzoffset - ) - - resultCount, eventCount = splunk_single(setup_splunk, search) - - record_property("host", host) - record_property("resultCount", resultCount) - record_property("message", message) - - assert resultCount == 2 - - def test_checkpoint_splunk_firewall2( record_property, setup_wordlist, setup_splunk, setup_sc4s ):