]> git.ipfire.org Git - thirdparty/suricata-verify.git/commitdiff
dataset: update engine module
authorShivani Bhardwaj <shivanib134@gmail.com>
Wed, 8 Jan 2025 10:36:30 +0000 (16:06 +0530)
committerShivani Bhardwaj <shivanib134@gmail.com>
Fri, 14 Feb 2025 07:11:50 +0000 (12:41 +0530)
since moving the file reading to Rust and adding the common
FatalErrorOnInit callback to util-debug.c, the module that finally does
make the error message is "debug".

tests/datasets-invalid-encoding/test.yaml

index 5733a0e8a922873a8d9d5c3a8d3fd515f361d79d..d5978f036cf7211817a42b7f9a5b777828366f7d 100644 (file)
@@ -11,7 +11,16 @@ exit-code: 1
 
 checks:
   - filter:
-      min-version: 7
+      min-version: 8
+      filename: suricata.json
+      count: 1
+      match:
+        log_level: "Error"
+        event_type: "engine"
+        engine.message.__find: "bad base64 encoding ua-seen"
+        engine.module: "debug"
+  - filter:
+      lt-version: 8
       filename: suricata.json
       count: 1
       match: