# encoding: utf-8
require "spec_helper"
require "logstash/patterns/core"

describe "NAGIOSLOGLINE - CURRENT HOST STATE" do

  let(:value)   { "[1427925600] CURRENT HOST STATE: nagioshost;UP;HARD;1;PING OK - Packet loss = 0%, RTA = 2.24 ms" }
  let(:grok)    { grok_match(subject, value) }

  it "a pattern pass the grok expression" do
    expect(grok).to pass
  end

  it "matches a simple message" do
    expect(subject).to match(value)
  end

  it "generates the nagios_epoch field" do
    expect(grok).to include("nagios_epoch" => "1427925600")
  end

  it "generates the nagios_message field" do
    expect(grok).to include("nagios_message" => "PING OK - Packet loss = 0%, RTA = 2.24 ms")
  end

  it "generates the nagios_hostname field" do
    expect(grok).to include("nagios_hostname" => "nagioshost")
  end

  it "generates the nagios_state field" do
    expect(grok).to include("nagios_state" => "UP")
  end

  it "generates the nagios_statetype field" do
    expect(grok).to include("nagios_statetype" => "HARD")
  end

end

describe "NAGIOSLOGLINE - CURRENT SERVICE STATE" do

  let(:value)   { "[1427925600] CURRENT SERVICE STATE: nagioshost;nagiosservice;OK;HARD;1;nagiosmessage" }
  let(:grok)    { grok_match(subject, value) }

  it "a pattern pass the grok expression" do
    expect(grok).to pass
  end

  it "matches a simple message" do
    expect(subject).to match(value)
  end

  it "generates the nagios_type field" do
    expect(grok).to include("nagios_type" => "CURRENT SERVICE STATE")
  end

  it "generates the nagios_epoch field" do
    expect(grok).to include("nagios_epoch" => "1427925600")
  end

  it "generates the nagios_message field" do
    expect(grok).to include("nagios_message" => "nagiosmessage")
  end

  it "generates the nagios_hostname field" do
    expect(grok).to include("nagios_hostname" => "nagioshost")
  end

  it "generates the nagios_service field" do
    expect(grok).to include("nagios_service" => "nagiosservice")
  end

  it "generates the nagios_state field" do
    expect(grok).to include("nagios_state" => "OK")
  end

  it "generates the nagios_statetype field" do
    expect(grok).to include("nagios_statetype" => "HARD")
  end

end

describe "NAGIOSLOGLINE - TIMEPERIOD TRANSITION" do

  let(:value)   { "[1427925600] TIMEPERIOD TRANSITION: 24X7;-1;1" }
  let(:grok)    { grok_match(subject, value) }

  it "a pattern pass the grok expression" do
    expect(grok).to pass
  end

  it "matches a simple message" do
    expect(subject).to match(value)
  end

  it "generates the nagios_type field" do
    expect(grok).to include("nagios_type" => "TIMEPERIOD TRANSITION")
  end

  it "generates the nagios_epoch field" do
    expect(grok).to include("nagios_epoch" => "1427925600")
  end

  it "generates the nagios_esrvice field" do
    expect(grok).to include("nagios_service" => "24X7")
  end

  it "generates the period from/to fields" do
    expect(grok).to include("nagios_unknown1" => "-1", "nagios_unknown2" => "1")
  end

  # Regression test for but fixed in Nagios patterns #30
  it "doesn't end in a semi-colon" do
    expect(grok['message']).to_not end_with(";")
  end

end

describe "NAGIOSLOGLINE - SERVICE ALERT" do

  let(:value)   { "[1427925689] SERVICE ALERT: varnish;Varnish Backend Connections;CRITICAL;SOFT;1;Current value: 154.0, warn threshold: 10.0, crit threshold: 20.0" }
  let(:grok)    { grok_match(subject, value) }

  it "a pattern pass the grok expression" do
    expect(grok).to pass
  end

  it "matches a simple message" do
    expect(subject).to match(value)
  end

  it "generates the nagios_type field" do
    expect(grok).to include("nagios_type" => "SERVICE ALERT")
  end

  it "generates the nagios_epoch field" do
    expect(grok).to include("nagios_epoch" => "1427925689")
  end

  it "generates the nagios_hostname field" do
    expect(grok).to include("nagios_hostname" => "varnish")
  end

  it "generates the nagios_service field" do
    expect(grok).to include("nagios_service" => "Varnish Backend Connections")
  end

  it "generates the nagios_state field" do
    expect(grok).to include("nagios_state" => "CRITICAL")
  end

  it "generates the nagios_statelevel field" do
    expect(grok).to include("nagios_statelevel" => "SOFT")
  end

  it "generates the nagios_message field" do
    expect(grok).to include("nagios_message" => "Current value: 154.0, warn threshold: 10.0, crit threshold: 20.0")
  end

end

describe "NAGIOSLOGLINE - SERVICE NOTIFICATION" do

  let(:value)   { "[1427950229] SERVICE NOTIFICATION: nagiosadmin;varnish;Varnish Backend Connections;CRITICAL;notify-service-by-email;Current value: 337.0, warn threshold: 10.0, crit threshold: 20.0" }
  let(:grok)    { grok_match(subject, value) }

  it "a pattern pass the grok expression" do
    expect(grok).to pass
  end

  it "matches a simple message" do
    expect(subject).to match(value)
  end

  it "generates the nagios_type field" do
    expect(grok).to include("nagios_type" => "SERVICE NOTIFICATION")
  end

  it "generates the nagios_epoch field" do
    expect(grok).to include("nagios_epoch" => "1427950229")
  end

  it "generates the nagios_notifyname field" do
    expect(grok).to include("nagios_notifyname" => "nagiosadmin")
  end

  it "generates the nagios_hostname field" do
    expect(grok).to include("nagios_hostname" => "varnish")
  end

  it "generates the nagios_service field" do
    expect(grok).to include("nagios_service" => "Varnish Backend Connections")
  end

  it "generates the nagios_state field" do
    expect(grok).to include("nagios_state" => "CRITICAL")
  end

  it "generates the nagios_contact field" do
    expect(grok).to include("nagios_contact" => "notify-service-by-email")
  end

  it "generates the nagios_message field" do
    expect(grok).to include("nagios_message" => "Current value: 337.0, warn threshold: 10.0, crit threshold: 20.0")
  end

end


describe "NAGIOSLOGLINE - HOST NOTIFICATION" do

  let(:value)   { "[1429878690] HOST NOTIFICATION: nagiosadmin;nagioshost;DOWN;notify-host-by-email;CRITICAL - Socket timeout after 10 seconds" }
  let(:grok)    { grok_match(subject, value) }

  it "a pattern pass the grok expression" do
    expect(grok).to pass
  end

  it "matches a simple message" do
    expect(subject).to match(value)
  end

  it "generates the nagios_type field" do
    expect(grok).to include("nagios_type" => "HOST NOTIFICATION")
  end

  it "generates the nagios_epoch field" do
    expect(grok).to include("nagios_epoch" => "1429878690")
  end

  it "generates the nagios_notifyname field" do
    expect(grok).to include("nagios_notifyname" => "nagiosadmin")
  end

  it "generates the nagios_hostname field" do
    expect(grok).to include("nagios_hostname" => "nagioshost")
  end

  it "generates the nagios_contact field" do
    expect(grok).to include("nagios_contact" => "notify-host-by-email")
  end

  it "generates the nagios_message field" do
    expect(grok).to include("nagios_message" => "CRITICAL - Socket timeout after 10 seconds")
  end

end