@@ -163,7 +163,7 @@ def test_requirements_fields(
163
163
164
164
# Search Query
165
165
record_property (
166
- "stanza_name " , splunk_searchtime_fields_requirements ["escaped_event" ]
166
+ "Event_with " , splunk_searchtime_fields_requirements ["escaped_event" ]
167
167
)
168
168
record_property ("fields" , splunk_searchtime_fields_requirements ["fields" ])
169
169
record_property (
@@ -187,11 +187,13 @@ def test_requirements_fields(
187
187
188
188
if splunk_searchtime_fields_requirements .get ("unique_identifier" ):
189
189
record_property (
190
- "stanza_name" , splunk_searchtime_fields_requirements ["unique_identifier" ]
191
- )
192
- unique_identifier = splunk_searchtime_fields_requirements ["unique_identifier" ]
193
-
194
- search = f"search { index_list } { basic_search } unique_identifier=\" { unique_identifier } \" | fields *"
190
+ "Event_with" , splunk_searchtime_fields_requirements ["unique_identifier" ]
191
+ )
192
+ unique_identifier = splunk_searchtime_fields_requirements [
193
+ "unique_identifier"
194
+ ]
195
+
196
+ search = f'search { index_list } { basic_search } unique_identifier="{ unique_identifier } " | fields *'
195
197
else :
196
198
search = f"search { index_list } { basic_search } { escaped_event } | fields *"
197
199
@@ -230,12 +232,16 @@ def test_requirements_fields(
230
232
if not wrong_value_fields == {}:
231
233
self .logger .error ("Wrong field values:\n " + wrong_values_table )
232
234
233
- assert wrong_value_fields == {}, (
235
+ error_message = (
234
236
f"\n Not all required fields have correct values or some fields are missing in Splunk. Wrong field values:\n { wrong_values_table } "
235
237
f"{ format_search_query_log (search )} "
236
- f"Test failed for event: { escaped_event } \n "
237
238
)
238
239
240
+ if splunk_searchtime_fields_requirements .get ("unique_identifier" ):
241
+ error_message += f"Test failed for event: { escaped_event } \n "
242
+
243
+ assert wrong_value_fields == {}, error_message
244
+
239
245
@pytest .mark .splunk_searchtime_fields
240
246
@pytest .mark .splunk_searchtime_fields_negative
241
247
def test_props_fields_no_dash_not_empty (
@@ -415,19 +421,19 @@ def test_datamodels(
415
421
416
422
if splunk_searchtime_fields_datamodels .get ("unique_identifier" ):
417
423
record_property (
418
- "stanza_name " , splunk_searchtime_fields_datamodels ["unique_identifier" ]
419
- )
424
+ "Event_with " , splunk_searchtime_fields_datamodels ["unique_identifier" ]
425
+ )
420
426
unique_identifier = splunk_searchtime_fields_datamodels ["unique_identifier" ]
421
427
422
428
self .logger .info (
423
- f" Testing for tag { datamodels } with unique_identifier=\ "{ unique_identifier } \" "
424
- )
425
-
426
- search = f" search { index_list } unique_identifier=\ "{ unique_identifier } \ " | fields *"
429
+ f' Testing for tag { datamodels } with unique_identifier="{ unique_identifier } "'
430
+ )
431
+
432
+ search = f' search { index_list } unique_identifier="{ unique_identifier } " | fields *'
427
433
else :
428
434
self .logger .info (
429
- f"Testing for tag { datamodels } with tag_query { escaped_event } "
430
- )
435
+ f"Testing for tag { datamodels } with tag_query { escaped_event } "
436
+ )
431
437
search = f"search { index_list } { escaped_event } | fields *"
432
438
433
439
self .logger .info (f"Search: { search } " )
@@ -487,9 +493,12 @@ def test_datamodels(
487
493
],
488
494
)
489
495
490
- assert (
491
- missing_datamodels == [] and wrong_datamodels == []
492
- ), f"Incorrect datamodels found:\n { exc_message } "
496
+ error_message = f"Incorrect datamodels found:\n { exc_message } "
497
+
498
+ if splunk_searchtime_fields_datamodels .get ("unique_identifier" ):
499
+ error_message += f"\n Test failed for event: { escaped_event } \n "
500
+
501
+ assert missing_datamodels == [] and wrong_datamodels == [], error_message
493
502
494
503
@pytest .mark .splunk_searchtime_fields
495
504
@pytest .mark .splunk_searchtime_fields_eventtypes
0 commit comments