2024-05-22 19:01:20 +00:00
|
|
|
|
package logstorage
|
|
|
|
|
|
|
|
|
|
import (
|
|
|
|
|
"testing"
|
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
func TestParsePipeFormatSuccess(t *testing.T) {
|
|
|
|
|
f := func(pipeStr string) {
|
|
|
|
|
t.Helper()
|
|
|
|
|
expectParsePipeSuccess(t, pipeStr)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
f(`format "foo<bar>"`)
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format "foo<bar>" skip_empty_results`)
|
|
|
|
|
f(`format "foo<bar>" keep_original_fields`)
|
2024-05-22 19:01:20 +00:00
|
|
|
|
f(`format "" as x`)
|
|
|
|
|
f(`format "<>" as x`)
|
|
|
|
|
f(`format foo as x`)
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format foo as x skip_empty_results`)
|
|
|
|
|
f(`format foo as x keep_original_fields`)
|
2024-05-22 19:01:20 +00:00
|
|
|
|
f(`format "<foo>"`)
|
|
|
|
|
f(`format "<foo>bar<baz>"`)
|
|
|
|
|
f(`format "bar<baz><xyz>bac"`)
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format "bar<baz><xyz>bac" skip_empty_results`)
|
|
|
|
|
f(`format "bar<baz><xyz>bac" keep_original_fields`)
|
2024-05-22 19:01:20 +00:00
|
|
|
|
f(`format if (x:y) "bar<baz><xyz>bac"`)
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format if (x:y) "bar<baz><xyz>bac" skip_empty_results`)
|
|
|
|
|
f(`format if (x:y) "bar<baz><xyz>bac" keep_original_fields`)
|
2024-05-22 19:01:20 +00:00
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func TestParsePipeFormatFailure(t *testing.T) {
|
|
|
|
|
f := func(pipeStr string) {
|
|
|
|
|
t.Helper()
|
|
|
|
|
expectParsePipeFailure(t, pipeStr)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
f(`format`)
|
|
|
|
|
f(`format if`)
|
|
|
|
|
f(`format foo bar`)
|
|
|
|
|
f(`format foo if`)
|
|
|
|
|
f(`format foo as x if (x:y)`)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func TestPipeFormat(t *testing.T) {
|
|
|
|
|
f := func(pipeStr string, rows, rowsExpected [][]Field) {
|
|
|
|
|
t.Helper()
|
|
|
|
|
expectPipeResults(t, pipeStr, rows, rowsExpected)
|
|
|
|
|
}
|
|
|
|
|
|
2024-06-05 01:18:12 +00:00
|
|
|
|
// format time, duration and ipv4
|
|
|
|
|
f(`format 'time=<time:foo>, duration=<duration:bar>, ip=<ipv4:baz>' as x`, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"foo", `1717328141123456789`},
|
|
|
|
|
{"bar", `210123456789`},
|
|
|
|
|
{"baz", "1234567890"},
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
{"foo", `abc`},
|
|
|
|
|
{"bar", `de`},
|
|
|
|
|
{"baz", "ghkl"},
|
|
|
|
|
},
|
|
|
|
|
}, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"foo", `1717328141123456789`},
|
|
|
|
|
{"bar", `210123456789`},
|
|
|
|
|
{"baz", "1234567890"},
|
|
|
|
|
{"x", "time=2024-06-02T11:35:41.123456789Z, duration=3m30.123456789s, ip=73.150.2.210"},
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
{"foo", `abc`},
|
|
|
|
|
{"bar", `de`},
|
|
|
|
|
{"baz", "ghkl"},
|
|
|
|
|
{"x", "time=abc, duration=de, ip=ghkl"},
|
|
|
|
|
},
|
|
|
|
|
})
|
|
|
|
|
|
2024-05-24 22:30:58 +00:00
|
|
|
|
// skip_empty_results
|
|
|
|
|
f(`format '<foo><bar>' as x skip_empty_results`, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"foo", `abc`},
|
|
|
|
|
{"bar", `cde`},
|
|
|
|
|
{"x", "111"},
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
{"xfoo", `ppp`},
|
|
|
|
|
{"xbar", `123`},
|
|
|
|
|
{"x", "222"},
|
|
|
|
|
},
|
|
|
|
|
}, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"foo", `abc`},
|
|
|
|
|
{"bar", `cde`},
|
|
|
|
|
{"x", `abccde`},
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
{"xfoo", `ppp`},
|
|
|
|
|
{"xbar", `123`},
|
|
|
|
|
{"x", `222`},
|
|
|
|
|
},
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
// no skip_empty_results
|
|
|
|
|
f(`format '<foo><bar>' as x`, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"foo", `abc`},
|
|
|
|
|
{"bar", `cde`},
|
|
|
|
|
{"x", "111"},
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
{"xfoo", `ppp`},
|
|
|
|
|
{"xbar", `123`},
|
|
|
|
|
{"x", "222"},
|
|
|
|
|
},
|
|
|
|
|
}, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"foo", `abc`},
|
|
|
|
|
{"bar", `cde`},
|
|
|
|
|
{"x", `abccde`},
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
{"xfoo", `ppp`},
|
|
|
|
|
{"xbar", `123`},
|
|
|
|
|
{"x", ``},
|
|
|
|
|
},
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
// no keep_original_fields
|
|
|
|
|
f(`format '{"foo":<q:foo>,"bar":"<bar>"}' as x`, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"foo", `abc`},
|
|
|
|
|
{"bar", `cde`},
|
|
|
|
|
{"x", "qwe"},
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
{"foo", `ppp`},
|
|
|
|
|
{"bar", `123`},
|
|
|
|
|
},
|
|
|
|
|
}, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"foo", `abc`},
|
|
|
|
|
{"bar", `cde`},
|
|
|
|
|
{"x", `{"foo":"abc","bar":"cde"}`},
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
{"foo", `ppp`},
|
|
|
|
|
{"bar", `123`},
|
|
|
|
|
{"x", `{"foo":"ppp","bar":"123"}`},
|
|
|
|
|
},
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
// keep_original_fields
|
|
|
|
|
f(`format '{"foo":<q:foo>,"bar":"<bar>"}' as x keep_original_fields`, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"foo", `abc`},
|
|
|
|
|
{"bar", `cde`},
|
|
|
|
|
{"x", "qwe"},
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
{"foo", `ppp`},
|
|
|
|
|
{"bar", `123`},
|
|
|
|
|
},
|
|
|
|
|
}, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"foo", `abc`},
|
|
|
|
|
{"bar", `cde`},
|
|
|
|
|
{"x", `qwe`},
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
{"foo", `ppp`},
|
|
|
|
|
{"bar", `123`},
|
|
|
|
|
{"x", `{"foo":"ppp","bar":"123"}`},
|
|
|
|
|
},
|
|
|
|
|
})
|
|
|
|
|
|
2024-05-22 19:01:20 +00:00
|
|
|
|
// plain string into a single field
|
|
|
|
|
f(`format '{"foo":<q:foo>,"bar":"<bar>"}' as x`, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"foo", `"abc"`},
|
|
|
|
|
{"bar", `cde`},
|
|
|
|
|
},
|
|
|
|
|
}, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"foo", `"abc"`},
|
|
|
|
|
{"bar", `cde`},
|
|
|
|
|
{"x", `{"foo":"\"abc\"","bar":"cde"}`},
|
|
|
|
|
},
|
|
|
|
|
})
|
|
|
|
|
|
2025-01-13 05:47:33 +00:00
|
|
|
|
// plain string
|
|
|
|
|
f(`format '<uc:foo><lc:bar> <hexencode:foo> <hexdecode:baz> <hexnumencode:n> <hexnumdecode:hn> <urlencode:foo> <urldecode:y>' as x`, [][]Field{
|
2024-12-04 13:35:31 +00:00
|
|
|
|
{
|
|
|
|
|
{"foo", `aцC`},
|
|
|
|
|
{"bar", `aBП`},
|
2025-01-13 05:47:33 +00:00
|
|
|
|
{"baz", "D099D0A6D0A3D09A"},
|
|
|
|
|
{"n", "1234"},
|
|
|
|
|
{"hn", "00000000000004D2"},
|
|
|
|
|
{"y", "a+b%20d"},
|
2024-12-04 13:35:31 +00:00
|
|
|
|
},
|
|
|
|
|
}, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"foo", `aцC`},
|
|
|
|
|
{"bar", `aBП`},
|
2025-01-13 05:47:33 +00:00
|
|
|
|
{"baz", "D099D0A6D0A3D09A"},
|
|
|
|
|
{"n", "1234"},
|
|
|
|
|
{"hn", "00000000000004D2"},
|
|
|
|
|
{"y", "a+b%20d"},
|
|
|
|
|
{"x", `AЦCabп 61D18643 ЙЦУК 00000000000004D2 1234 a%D1%86C a b d`},
|
|
|
|
|
},
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
// plain string
|
|
|
|
|
f(`format '<base64encode:foo>;<base64decode:bar>;<base64decode:baz>'`, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"foo", `aцC`},
|
|
|
|
|
{"bar", `YdGGQw==`},
|
|
|
|
|
{"baz", "al"},
|
|
|
|
|
},
|
|
|
|
|
}, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"foo", `aцC`},
|
|
|
|
|
{"bar", `YdGGQw==`},
|
|
|
|
|
{"baz", "al"},
|
|
|
|
|
{"_msg", "YdGGQw==;aцC;al"},
|
2024-12-04 13:35:31 +00:00
|
|
|
|
},
|
|
|
|
|
})
|
|
|
|
|
|
2024-05-22 19:01:20 +00:00
|
|
|
|
// plain string into a single field
|
|
|
|
|
f(`format foo as x`, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"_msg", `foobar`},
|
|
|
|
|
{"a", "x"},
|
|
|
|
|
},
|
|
|
|
|
}, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"_msg", `foobar`},
|
|
|
|
|
{"a", "x"},
|
|
|
|
|
{"x", `foo`},
|
|
|
|
|
},
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
// plain string with html escaping into a single field
|
|
|
|
|
f(`format "<foo>" as x`, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"_msg", `foobar`},
|
|
|
|
|
{"a", "x"},
|
|
|
|
|
},
|
|
|
|
|
}, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"_msg", `foobar`},
|
|
|
|
|
{"a", "x"},
|
|
|
|
|
{"x", `<foo>`},
|
|
|
|
|
},
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
// format with empty placeholders into existing field
|
|
|
|
|
f(`format "<_>foo<_>" as _msg`, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"_msg", `foobar`},
|
|
|
|
|
{"a", "x"},
|
|
|
|
|
},
|
|
|
|
|
}, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"_msg", `foo`},
|
|
|
|
|
{"a", "x"},
|
|
|
|
|
},
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
// format with various placeholders into new field
|
|
|
|
|
f(`format "a<foo>aa<_msg>xx<a>x" as x`, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"_msg", `foobar`},
|
|
|
|
|
{"a", "b"},
|
|
|
|
|
},
|
|
|
|
|
}, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"_msg", `foobar`},
|
|
|
|
|
{"a", "b"},
|
|
|
|
|
{"x", `aaafoobarxxbx`},
|
|
|
|
|
},
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
// format into existing field
|
|
|
|
|
f(`format "a<foo>aa<_msg>xx<a>x"`, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"_msg", `foobar`},
|
|
|
|
|
{"a", "b"},
|
|
|
|
|
},
|
|
|
|
|
}, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"_msg", `aaafoobarxxbx`},
|
|
|
|
|
{"a", "b"},
|
|
|
|
|
},
|
|
|
|
|
})
|
|
|
|
|
|
|
|
|
|
// conditional format over multiple rows
|
|
|
|
|
f(`format if (!c:*) "a: <a>, b: <b>, x: <a>" as c`, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"b", "bar"},
|
|
|
|
|
{"a", "foo"},
|
|
|
|
|
{"c", "keep-me"},
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
{"c", ""},
|
|
|
|
|
{"a", "f"},
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
{"b", "x"},
|
|
|
|
|
},
|
|
|
|
|
}, [][]Field{
|
|
|
|
|
{
|
|
|
|
|
{"b", "bar"},
|
|
|
|
|
{"a", "foo"},
|
|
|
|
|
{"c", "keep-me"},
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
{"a", "f"},
|
|
|
|
|
{"c", "a: f, b: , x: f"},
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
{"b", "x"},
|
|
|
|
|
{"c", "a: , b: x, x: "},
|
|
|
|
|
},
|
|
|
|
|
})
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func TestPipeFormatUpdateNeededFields(t *testing.T) {
|
|
|
|
|
f := func(s string, neededFields, unneededFields, neededFieldsExpected, unneededFieldsExpected string) {
|
|
|
|
|
t.Helper()
|
|
|
|
|
expectPipeNeededFields(t, s, neededFields, unneededFields, neededFieldsExpected, unneededFieldsExpected)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// all the needed fields
|
|
|
|
|
f(`format "foo" as x`, "*", "", "*", "x")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format "foo" as x skip_empty_results`, "*", "", "*", "")
|
|
|
|
|
f(`format "foo" as x keep_original_fields`, "*", "", "*", "")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
f(`format "<f1>foo" as x`, "*", "", "*", "x")
|
|
|
|
|
f(`format if (f2:z) "<f1>foo" as x`, "*", "", "*", "x")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format if (f2:z) "<f1>foo" as x skip_empty_results`, "*", "", "*", "")
|
|
|
|
|
f(`format if (f2:z) "<f1>foo" as x keep_original_fields`, "*", "", "*", "")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
|
|
|
|
|
// unneeded fields do not intersect with pattern and output field
|
|
|
|
|
f(`format "foo" as x`, "*", "f1,f2", "*", "f1,f2,x")
|
|
|
|
|
f(`format "<f3>foo" as x`, "*", "f1,f2", "*", "f1,f2,x")
|
|
|
|
|
f(`format if (f4:z) "<f3>foo" as x`, "*", "f1,f2", "*", "f1,f2,x")
|
|
|
|
|
f(`format if (f1:z) "<f3>foo" as x`, "*", "f1,f2", "*", "f2,x")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format if (f1:z) "<f3>foo" as x skip_empty_results`, "*", "f1,f2", "*", "f2")
|
|
|
|
|
f(`format if (f1:z) "<f3>foo" as x keep_original_fields`, "*", "f1,f2", "*", "f2")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
|
|
|
|
|
// unneeded fields intersect with pattern
|
|
|
|
|
f(`format "<f1>foo" as x`, "*", "f1,f2", "*", "f2,x")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format "<f1>foo" as x skip_empty_results`, "*", "f1,f2", "*", "f2")
|
|
|
|
|
f(`format "<f1>foo" as x keep_original_fields`, "*", "f1,f2", "*", "f2")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
f(`format if (f4:z) "<f1>foo" as x`, "*", "f1,f2", "*", "f2,x")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format if (f4:z) "<f1>foo" as x skip_empty_results`, "*", "f1,f2", "*", "f2")
|
|
|
|
|
f(`format if (f4:z) "<f1>foo" as x keep_original_fields`, "*", "f1,f2", "*", "f2")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
f(`format if (f2:z) "<f1>foo" as x`, "*", "f1,f2", "*", "x")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format if (f2:z) "<f1>foo" as x skip_empty_results`, "*", "f1,f2", "*", "")
|
|
|
|
|
f(`format if (f2:z) "<f1>foo" as x keep_original_fields`, "*", "f1,f2", "*", "")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
|
|
|
|
|
// unneeded fields intersect with output field
|
|
|
|
|
f(`format "<f1>foo" as x`, "*", "x,y", "*", "x,y")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format "<f1>foo" as x skip_empty_results`, "*", "x,y", "*", "x,y")
|
|
|
|
|
f(`format "<f1>foo" as x keep_original_fields`, "*", "x,y", "*", "x,y")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
f(`format if (f2:z) "<f1>foo" as x`, "*", "x,y", "*", "x,y")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format if (f2:z) "<f1>foo" as x skip_empty_results`, "*", "x,y", "*", "x,y")
|
|
|
|
|
f(`format if (f2:z) "<f1>foo" as x keep_original_fields`, "*", "x,y", "*", "x,y")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
f(`format if (y:z) "<f1>foo" as x`, "*", "x,y", "*", "x,y")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format if (y:z) "<f1>foo" as x skip_empty_results`, "*", "x,y", "*", "x,y")
|
|
|
|
|
f(`format if (y:z) "<f1>foo" as x keep_original_fields`, "*", "x,y", "*", "x,y")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
|
|
|
|
|
// needed fields do not intersect with pattern and output field
|
|
|
|
|
f(`format "<f1>foo" as f2`, "x,y", "", "x,y", "")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format "<f1>foo" as f2 keep_original_fields`, "x,y", "", "x,y", "")
|
|
|
|
|
f(`format "<f1>foo" as f2 skip_empty_results`, "x,y", "", "x,y", "")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
f(`format if (f3:z) "<f1>foo" as f2`, "x,y", "", "x,y", "")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format if (f3:z) "<f1>foo" as f2 skip_empty_results`, "x,y", "", "x,y", "")
|
|
|
|
|
f(`format if (f3:z) "<f1>foo" as f2 keep_original_fields`, "x,y", "", "x,y", "")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
f(`format if (x:z) "<f1>foo" as f2`, "x,y", "", "x,y", "")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format if (x:z) "<f1>foo" as f2 skip_empty_results`, "x,y", "", "x,y", "")
|
|
|
|
|
f(`format if (x:z) "<f1>foo" as f2 keep_original_fields`, "x,y", "", "x,y", "")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
|
|
|
|
|
// needed fields intersect with pattern field
|
|
|
|
|
f(`format "<f1>foo" as f2`, "f1,y", "", "f1,y", "")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format "<f1>foo" as f2 skip_empty_results`, "f1,y", "", "f1,y", "")
|
|
|
|
|
f(`format "<f1>foo" as f2 keep_original_fields`, "f1,y", "", "f1,y", "")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
f(`format if (f3:z) "<f1>foo" as f2`, "f1,y", "", "f1,y", "")
|
|
|
|
|
f(`format if (x:z) "<f1>foo" as f2`, "f1,y", "", "f1,y", "")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format if (x:z) "<f1>foo" as f2 skip_empty_results`, "f1,y", "", "f1,y", "")
|
|
|
|
|
f(`format if (x:z) "<f1>foo" as f2 keep_original_fields`, "f1,y", "", "f1,y", "")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
|
|
|
|
|
// needed fields intersect with output field
|
|
|
|
|
f(`format "<f1>foo" as f2`, "f2,y", "", "f1,y", "")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format "<f1>foo" as f2 skip_empty_results`, "f2,y", "", "f1,f2,y", "")
|
|
|
|
|
f(`format "<f1>foo" as f2 keep_original_fields`, "f2,y", "", "f1,f2,y", "")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
f(`format if (f3:z) "<f1>foo" as f2`, "f2,y", "", "f1,f3,y", "")
|
|
|
|
|
f(`format if (x:z or y:w) "<f1>foo" as f2`, "f2,y", "", "f1,x,y", "")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format if (x:z or y:w) "<f1>foo" as f2 skip_empty_results`, "f2,y", "", "f1,f2,x,y", "")
|
|
|
|
|
f(`format if (x:z or y:w) "<f1>foo" as f2 keep_original_fields`, "f2,y", "", "f1,f2,x,y", "")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
|
|
|
|
|
// needed fields intersect with pattern and output fields
|
|
|
|
|
f(`format "<f1>foo" as f2`, "f1,f2,y", "", "f1,y", "")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format "<f1>foo" as f2 skip_empty_results`, "f1,f2,y", "", "f1,f2,y", "")
|
|
|
|
|
f(`format "<f1>foo" as f2 keep_original_fields`, "f1,f2,y", "", "f1,f2,y", "")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
f(`format if (f3:z) "<f1>foo" as f2`, "f1,f2,y", "", "f1,f3,y", "")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format if (f3:z) "<f1>foo" as f2 skip_empty_results`, "f1,f2,y", "", "f1,f2,f3,y", "")
|
|
|
|
|
f(`format if (f3:z) "<f1>foo" as f2 keep_original_fields`, "f1,f2,y", "", "f1,f2,f3,y", "")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
f(`format if (x:z or y:w) "<f1>foo" as f2`, "f1,f2,y", "", "f1,x,y", "")
|
2024-05-24 22:30:58 +00:00
|
|
|
|
f(`format if (x:z or y:w) "<f1>foo" as f2 skip_empty_results`, "f1,f2,y", "", "f1,f2,x,y", "")
|
|
|
|
|
f(`format if (x:z or y:w) "<f1>foo" as f2 keep_original_fields`, "f1,f2,y", "", "f1,f2,x,y", "")
|
2024-05-22 19:01:20 +00:00
|
|
|
|
}
|
2024-12-04 13:35:31 +00:00
|
|
|
|
|
|
|
|
|
func TestAppendUppercase(t *testing.T) {
|
|
|
|
|
f := func(s, resultExpected string) {
|
|
|
|
|
t.Helper()
|
|
|
|
|
|
|
|
|
|
result := appendUppercase(nil, s)
|
|
|
|
|
if string(result) != resultExpected {
|
|
|
|
|
t.Fatalf("unexpected result; got %q; want %q", result, resultExpected)
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
f("", "")
|
|
|
|
|
f("foo", "FOO")
|
|
|
|
|
f("лДЫ", "ЛДЫ")
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func TestAppendLowercase(t *testing.T) {
|
|
|
|
|
f := func(s, resultExpected string) {
|
|
|
|
|
t.Helper()
|
|
|
|
|
|
|
|
|
|
result := appendLowercase(nil, s)
|
|
|
|
|
if string(result) != resultExpected {
|
|
|
|
|
t.Fatalf("unexpected result; got %q; want %q", result, resultExpected)
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
f("", "")
|
|
|
|
|
f("FoO", "foo")
|
|
|
|
|
f("ЛДЫ", "лды")
|
|
|
|
|
}
|
2025-01-13 05:47:33 +00:00
|
|
|
|
|
|
|
|
|
func TestAppendURLEncode(t *testing.T) {
|
|
|
|
|
f := func(s, resultExpected string) {
|
|
|
|
|
t.Helper()
|
|
|
|
|
|
|
|
|
|
result := appendURLEncode(nil, s)
|
|
|
|
|
if string(result) != resultExpected {
|
|
|
|
|
t.Fatalf("unexpected result; got %q; want %q", result, resultExpected)
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
f("", "")
|
|
|
|
|
f("foo", "foo")
|
|
|
|
|
f("a b+", "a+b%2B")
|
|
|
|
|
f("йЫВ9&=/;", "%D0%B9%D0%AB%D0%929%26%3D%2F%3B")
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func TestAppendURLDecode(t *testing.T) {
|
|
|
|
|
f := func(s, resultExpected string) {
|
|
|
|
|
t.Helper()
|
|
|
|
|
|
|
|
|
|
result := appendURLDecode(nil, s)
|
|
|
|
|
if string(result) != resultExpected {
|
|
|
|
|
t.Fatalf("unexpected result; got %q; want %q", result, resultExpected)
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
f("", "")
|
|
|
|
|
f("foo", "foo")
|
|
|
|
|
f("a+b%2Bs", "a b+s")
|
|
|
|
|
f("%D0%B9%D0%AB%D0%929%26%3D%2F%3B", "йЫВ9&=/;")
|
|
|
|
|
f("%qwer%3", "%qwer%3")
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func TestAppendHexUint64Encode(t *testing.T) {
|
|
|
|
|
f := func(n uint64, resultExpected string) {
|
|
|
|
|
t.Helper()
|
|
|
|
|
|
|
|
|
|
result := appendHexUint64Encode(nil, n)
|
|
|
|
|
if string(result) != resultExpected {
|
|
|
|
|
t.Fatalf("unexpected result; got %q; want %q", result, resultExpected)
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
f(0, "0000000000000000")
|
|
|
|
|
f(123456654, "00000000075BCC8E")
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func TestAppendHexUint64Decode(t *testing.T) {
|
|
|
|
|
f := func(s, resultExpected string) {
|
|
|
|
|
t.Helper()
|
|
|
|
|
|
|
|
|
|
result := appendHexUint64Decode(nil, s)
|
|
|
|
|
if string(result) != resultExpected {
|
|
|
|
|
t.Fatalf("unexpected result; got %q; want %q", result, resultExpected)
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
f("0", "0")
|
|
|
|
|
f("5", "5")
|
|
|
|
|
f("ff", "255")
|
|
|
|
|
f("0000000000000000", "0")
|
|
|
|
|
f("00000000075BCC8E", "123456654")
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func TestAppendHexEncode(t *testing.T) {
|
|
|
|
|
f := func(s, resultExpected string) {
|
|
|
|
|
t.Helper()
|
|
|
|
|
|
|
|
|
|
result := appendHexEncode(nil, s)
|
|
|
|
|
if string(result) != resultExpected {
|
|
|
|
|
t.Fatalf("unexpected result; got %q; want %q", result, resultExpected)
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
f("", "")
|
|
|
|
|
f("aA oqDF", "6141206F714446")
|
|
|
|
|
f("ЙЦУК", "D099D0A6D0A3D09A")
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func TestAppendHexDecode(t *testing.T) {
|
|
|
|
|
f := func(s, resultExpected string) {
|
|
|
|
|
t.Helper()
|
|
|
|
|
|
|
|
|
|
result := appendHexDecode(nil, s)
|
|
|
|
|
if string(result) != resultExpected {
|
|
|
|
|
t.Fatalf("unexpected result; got %q; want %q", result, resultExpected)
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
f("", "")
|
|
|
|
|
f("6141206F714446", "aA oqDF")
|
|
|
|
|
f("D099D0A6D0A3D09A", "ЙЦУК")
|
|
|
|
|
f("1", "1")
|
|
|
|
|
f("1t", "1t")
|
|
|
|
|
f("t3", "t3")
|
|
|
|
|
f("qwert", "qwert")
|
|
|
|
|
f("qwerty", "qwerty")
|
|
|
|
|
}
|