Add system test for panw pan-os (syslog input) (elastic#594)

Add a system test for the syslog input in the PANW PAN-OS data stream.
build-security · Feb 1, 2021 · 5a38a2d · 5a38a2d
1 parent 8aee0ec
commit 5a38a2d
Show file tree

Hide file tree

Showing 11 changed files with 18 additions and 11 deletions.
diff --git a/packages/panw/_dev/deploy/docker/Dockerfile b/packages/panw/_dev/deploy/docker/Dockerfile
diff --git a/packages/panw/_dev/deploy/docker/docker-compose.yml b/packages/panw/_dev/deploy/docker/docker-compose.yml
@@ -1,8 +1,13 @@
 version: '2.3'
 services:
-  panw:
-    tty: true
-    build: .
+  panw-logfile:
+    image: alpine
     volumes:
-      - ${SERVICE_LOGS_DIR}:/logs
-    command: -c "cp /sample_logs/*.log /logs/"
+      - ./sample_logs:/sample_logs:ro
+      - ${SERVICE_LOGS_DIR}:/var/log
+    command: /bin/sh -c "cp /sample_logs/* /var/log/"
+  panw-panos-syslog:
+    image: akroh/stream:v0.0.1
+    volumes:
+      - ./sample_logs:/sample_logs:ro
+    command: log --start-signal=SIGHUP --delay=5s --addr elastic-agent:9514 -p=udp /sample_logs/panw-panos-traffic.log
diff --git a/...ev/deploy/docker/panw-panos-inc-other.log → ...cker/sample_logs/panw-panos-inc-other.log b/...ev/deploy/docker/panw-panos-inc-other.log → ...cker/sample_logs/panw-panos-inc-other.log
diff --git a/...v/deploy/docker/panw-panos-inc-threat.log → ...ker/sample_logs/panw-panos-inc-threat.log b/...v/deploy/docker/panw-panos-inc-threat.log → ...ker/sample_logs/panw-panos-inc-threat.log
diff --git a/.../deploy/docker/panw-panos-inc-traffic.log → ...er/sample_logs/panw-panos-inc-traffic.log b/.../deploy/docker/panw-panos-inc-traffic.log → ...er/sample_logs/panw-panos-inc-traffic.log
diff --git a/.../_dev/deploy/docker/panw-panos-threat.log → .../docker/sample_logs/panw-panos-threat.log b/.../_dev/deploy/docker/panw-panos-threat.log → .../docker/sample_logs/panw-panos-threat.log
diff --git a/..._dev/deploy/docker/panw-panos-traffic.log → ...docker/sample_logs/panw-panos-traffic.log b/..._dev/deploy/docker/panw-panos-traffic.log → ...docker/sample_logs/panw-panos-traffic.log
diff --git a/.../_dev/test/system/test-default-config.yml → .../_dev/test/system/test-logfile-config.yml b/.../_dev/test/system/test-default-config.yml → .../_dev/test/system/test-logfile-config.yml
@@ -1,3 +1,4 @@
+service: panw-logfile
 input: logfile
 vars:
   paths:

diff --git a/packages/panw/data_stream/panos/_dev/test/system/test-syslog-config.yml b/packages/panw/data_stream/panos/_dev/test/system/test-syslog-config.yml
@@ -0,0 +1,6 @@
+service: panw-panos-syslog
+service_notify_signal: SIGHUP
+input: syslog
+vars:
+  syslog_host: 0.0.0.0
+  syslog_port: 9514
diff --git a/...ata_stream/panos/agent/stream/log.yml.hbs → ...stream/panos/agent/stream/logfile.yml.hbs b/...ata_stream/panos/agent/stream/log.yml.hbs → ...stream/panos/agent/stream/logfile.yml.hbs
diff --git a/packages/panw/data_stream/panos/manifest.yml b/packages/panw/data_stream/panos/manifest.yml
@@ -59,6 +59,6 @@ streams:
         show_user: false
         default:
           - untrust
-    template_path: log.yml.hbs
+    template_path: logfile.yml.hbs
     title: Log files
     description: Collect logs via log file