From 9727a8f5b0ce88723a74ad857998e7324ad798f8 Mon Sep 17 00:00:00 2001
From: rfaircloth-splunk <rfaircloth@splunk.com>
Date: Mon, 3 Feb 2020 07:03:22 -0500
Subject: [PATCH] Update test_common.py

---
 tests/test_common.py | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/tests/test_common.py b/tests/test_common.py
index eecec2d..11912b5 100644
--- a/tests/test_common.py
+++ b/tests/test_common.py
@@ -172,3 +172,14 @@ def test_check_config_version_multiple(record_property, setup_wordlist, setup_sp
     record_property("resultCount", resultCount)
 
     assert resultCount == 0
+
+def test_check_sc4s_version(record_property, setup_wordlist, setup_splunk):
+
+    st = env.from_string("search index=main sourcetype=\"sc4s:events:startup:out\" \"sc4s version=\" NOT \"UNKNOWN\"")
+    search = st.render()
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("resultCount", resultCount)
+
+    assert resultCount == 0
\ No newline at end of file