tests

Author: diogolima-elastic

x-pack/platform/plugins/shared/streams_app/public/components/stream_management/data_management/stream_detail_enrichment/steps/blocks/action/dissect/dissect_color_manager.test.ts

@@ -0,0 +1,123 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+
+import { parseDissectFieldTokens, DissectColorManager } from './dissect_color_manager';
+
+describe('parseDissectFieldTokens', () => {
+  it('tracks startIndex and endIndex for each token', () => {
+    const tokens = parseDissectFieldTokens('[%{ts}] %{level} - %{msg}');
+
+    expect(tokens).toHaveLength(3);
+    expect(tokens[0]).toMatchObject({ fieldName: 'ts', startIndex: 1, endIndex: 6 });
+    expect(tokens[1]).toMatchObject({ fieldName: 'level', startIndex: 8, endIndex: 16 });
+    expect(tokens[2]).toMatchObject({ fieldName: 'msg', startIndex: 19, endIndex: 25 });
+  });
+
+  it('includes skip and reference keys (unlike @kbn/streamlang parseDissectPattern which filters them)', () => {
+    const tokens = parseDissectFieldTokens('%{a} %{?skip} %{*ref} %{&ref}');
+
+    expect(tokens).toHaveLength(4);
+    expect(tokens[1]).toMatchObject({ fieldName: 'skip', modifier: '?' });
+    expect(tokens[2]).toMatchObject({ fieldName: 'ref', modifier: '*' });
+    expect(tokens[3]).toMatchObject({ fieldName: 'ref', modifier: '&' });
+  });
+});
+
+describe('DissectColorManager', () => {
+  it('assigns colors deterministically in palette order', () => {
+    const manager = new DissectColorManager();
+    manager.updatePattern('%{a} %{b} %{c}');
+    const map = manager.getFieldColourMap();
+
+    expect(map.get('a')).toBe('Primary');
+    expect(map.get('b')).toBe('Accent');
+    expect(map.get('c')).toBe('AccentSecondary');
+  });
+
+  it('assigns the same color to duplicate field names', () => {
+    const manager = new DissectColorManager();
+    manager.updatePattern('%{a} %{b} %{a}');
+    const map = manager.getFieldColourMap();
+
+    expect(map.size).toBe(2);
+    expect(map.get('a')).toBe('Primary');
+    expect(map.get('b')).toBe('Accent');
+  });
+
+  it('removes colors for fields no longer in the pattern', () => {
+    const manager = new DissectColorManager();
+    manager.updatePattern('%{a} %{b} %{c}');
+    expect(manager.getFieldColourMap().size).toBe(3);
+
+    manager.updatePattern('%{a} %{c}');
+    const map = manager.getFieldColourMap();
+
+    expect(map.size).toBe(2);
+    expect(map.has('b')).toBe(false);
+    expect(map.has('a')).toBe(true);
+    expect(map.has('c')).toBe(true);
+  });
+
+  it('transfers color when a field is fully replaced at the same position', () => {
+    const manager = new DissectColorManager();
+    manager.updatePattern('%{a} %{b}');
+    const colorA = manager.getFieldColourMap().get('a');
+
+    manager.updatePattern('%{renamed} %{b}');
+    const map = manager.getFieldColourMap();
+
+    expect(map.get('renamed')).toBe(colorA);
+    expect(map.has('a')).toBe(false);
+  });
+
+  it('assigns a new color when renaming one of several duplicate fields', () => {
+    const manager = new DissectColorManager();
+    manager.updatePattern('%{+ts} %{+ts} %{+ts} %{host}');
+    const colorTs = manager.getFieldColourMap().get('ts');
+    const colorHost = manager.getFieldColourMap().get('host');
+
+    manager.updatePattern('%{+ts2} %{+ts} %{+ts} %{host}');
+    const map = manager.getFieldColourMap();
+
+    expect(map.get('ts')).toBe(colorTs);
+    expect(map.get('host')).toBe(colorHost);
+    expect(map.get('ts2')).not.toBe(colorTs);
+  });
+
+  it('keeps existing colors stable when new fields are added', () => {
+    const manager = new DissectColorManager();
+    manager.updatePattern('%{a} %{b}');
+    const colorA = manager.getFieldColourMap().get('a');
+    const colorB = manager.getFieldColourMap().get('b');
+
+    manager.updatePattern('%{a} %{b} %{c}');
+    const map = manager.getFieldColourMap();
+
+    expect(map.get('a')).toBe(colorA);
+    expect(map.get('b')).toBe(colorB);
+    expect(map.has('c')).toBe(true);
+  });
+
+  it('cycles through the palette when more fields than colors', () => {
+    const manager = new DissectColorManager();
+    const fields = Array.from({ length: 10 }, (_, i) => `%{f${i}}`).join(' ');
+    manager.updatePattern(fields);
+    const map = manager.getFieldColourMap();
+
+    expect(map.size).toBe(10);
+    expect(map.get('f0')).toBe(map.get('f8'));
+  });
+
+  it('clears all colors when pattern becomes empty', () => {
+    const manager = new DissectColorManager();
+    manager.updatePattern('%{a} %{b}');
+    expect(manager.getFieldColourMap().size).toBe(2);
+
+    manager.updatePattern('');
+    expect(manager.getFieldColourMap().size).toBe(0);
+  });
+});

x-pack/platform/plugins/shared/streams_app/public/components/stream_management/data_management/stream_detail_enrichment/steps/blocks/action/dissect/dissect_sample.test.ts

@@ -0,0 +1,84 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+
+import { dissectPatternToRegex } from './dissect_sample';
+
+describe('dissectPatternToRegex', () => {
+  it('returns null for pattern with no tokens', () => {
+    expect(dissectPatternToRegex('')).toBeNull();
+    expect(dissectPatternToRegex('just plain text')).toBeNull();
+  });
+
+  it('provides correct group-to-field-name mapping', () => {
+    const result = dissectPatternToRegex('%{clientip} %{method} %{status}');
+
+    expect(result!.groupToFieldName.get('_f0')).toBe('clientip');
+    expect(result!.groupToFieldName.get('_f1')).toBe('method');
+    expect(result!.groupToFieldName.get('_f2')).toBe('status');
+  });
+
+  it('provides match indices via the d flag', () => {
+    const result = dissectPatternToRegex('%{a} %{b}');
+    const match = result!.regex.exec('hello world');
+
+    expect(match!.indices!.groups!._f0).toEqual([0, 5]);
+    expect(match!.indices!.groups!._f1).toEqual([6, 11]);
+  });
+
+  it('escapes regex special characters in delimiters', () => {
+    const result = dissectPatternToRegex('[%{ts}] %{msg}');
+    const match = result!.regex.exec('[2024-01-01] hello world');
+
+    expect(match!.groups!._f0).toBe('2024-01-01');
+    expect(match!.groups!._f1).toBe('hello world');
+  });
+
+  it('makes the last token greedy when no trailing literal', () => {
+    const result = dissectPatternToRegex('%{a} %{b}');
+    const match = result!.regex.exec('x y z w');
+
+    expect(match!.groups!._f0).toBe('x');
+    expect(match!.groups!._f1).toBe('y z w');
+  });
+
+  it('makes the last token non-greedy when there is trailing literal', () => {
+    const result = dissectPatternToRegex('%{a} %{b};');
+    const match = result!.regex.exec('x y;');
+
+    expect(match!.groups!._f0).toBe('x');
+    expect(match!.groups!._f1).toBe('y');
+  });
+
+  it('handles a real-world Apache log pattern', () => {
+    const result = dissectPatternToRegex('%{ip} - - [%{ts}] "%{request}" %{status} %{size}');
+    const sample = '55.3.244.1 - - [2024-01-01T00:00:00Z] "GET /index.html HTTP/1.1" 200 1234';
+    const match = result!.regex.exec(sample);
+
+    expect(match!.groups!._f0).toBe('55.3.244.1');
+    expect(match!.groups!._f1).toBe('2024-01-01T00:00:00Z');
+    expect(match!.groups!._f2).toBe('GET /index.html HTTP/1.1');
+    expect(match!.groups!._f3).toBe('200');
+    expect(match!.groups!._f4).toBe('1234');
+  });
+
+  it('uses index-based group names so duplicate field names do not collide', () => {
+    const result = dissectPatternToRegex('%{+name/1} %{+name/2}');
+    const match = result!.regex.exec('John Doe');
+
+    expect(result!.groupToFieldName.get('_f0')).toBe('name');
+    expect(result!.groupToFieldName.get('_f1')).toBe('name');
+    expect(match!.groups!._f0).toBe('John');
+    expect(match!.groups!._f1).toBe('Doe');
+  });
+
+  it('uses index-based group names so special characters in field names are safe', () => {
+    const result = dissectPatternToRegex('%{@timestamp} %{host.name}');
+
+    expect(result!.groupToFieldName.get('_f0')).toBe('@timestamp');
+    expect(result!.groupToFieldName.get('_f1')).toBe('host.name');
+  });
+});