fix mappings integ tests (#1213) (#1215)

(cherry picked from commit bd8f0c4)

Signed-off-by: Subhobrata Dey <[email protected]>

src/test/resources/ad_ldap-sample.json

@@ -2,7 +2,7 @@
   "azure.signinlogs.properties.user_id": "1234",
   "azure.activitylogs.category": "1234",
   "azure.platformlogs.operation_name": "1234",
-  "modified_properties.new_value": "1234",
+  "ModifiedProperties.NewValue": "1234",
   "azure.resource.provider": "1234",
   "azure.signinlogs.properties.conditional_access_status": "1234",
   "SearchFilter": "1234",
@@ -18,5 +18,6 @@
   "EventID": 12345,
   "azure.signinlogs.properties.network_location_details": "1234",
   "azure.auditlogs.properties.activity_display_name": "1234",
-  "creationTime": "2022-12-27T20:29:31.734Z"
+  "creationTime": "2022-12-27T20:29:31.734Z",
+  "DeviceDetail.isCompliant": true
 }

src/test/resources/azure-sample.json

@@ -1,27 +1,44 @@
 {
-  "azure.signinlogs.props.user_id": "111",
+  "azure.signinlogs.properties.user_id": "111",
   "azure.activitylogs.category": "111",
   "modified_properties.new_value": "111",
+  "azure.activitylogs.identity.claims_initiated_by_user.name": "111",
   "azure.resource.provider": "111",
-  "azure.signinlogs.props.conditional_access_status": "111",
+  "azure.signinlogs.properties.conditional_access_status": "111",
   "SearchFilter": "111",
   "azure.platformlogs.result_type": "111",
-  "azure.signinlogs.props.device_detail.is_compliant": true,
+  "azure.signinlogs.properties.device_detail.is_compliant": true,
   "ResourceDisplayName": 111,
-  "azure.signinlogs.props.authentication_requirement": "111",
+  "azure.signinlogs.properties.resource_tenant_id": "111",
+  "azure.signinlogs.properties.authentication_requirement": "111",
   "TargetResources": "111",
   "Workload": "111",
-  "azure.signinlogs.props.device_detail.device_id": "111",
+  "azure.signinlogs.properties.device_detail.device_id": "111",
   "azure.platformlogs.operation_name": "111",
-  "azure.signinlogs.props.resource_id": "111",
+  "azure.signinlogs.properties.resource_id": "111",
   "EventID": 1234,
-  "azure.signinlogs.props.network_location_details": "111",
-  "azure.auditlogs.props.activity_display_name": "111",
-  "azure.signinlogs.result-description": "111",
+  "failure_status_reason": "111",
+  "azure.signinlogs.properties.network_location_details": "111",
+  "azure.auditlogs.properties.activity_display_name": "111",
+  "azure.signinlogs.result_description": "111",
   "eventSource": "111",
   "eventName": "111",
   "azure.platformlogs.status": "111",
   "azure.auditlogs.props.logged_by_service": "111",
-  "properties_message": "111",
-  "creationTime": "2022-12-27T20:29:31.734Z"
+  "properties.message": "111",
+  "creationTime": "2022-12-27T20:29:31.734Z",
+  "Count": "111",
+  "azure.signinlogs.properties.app_id": "111",
+  "azure.signinlogs.properties.client_app_used": true,
+  "ActivityDetails": "111",
+  "Target": "111",
+  "azure.signinlogs.properties.device_detail.trust_type": "111",
+  "azure.signinlogs.properties.home_tenant_id": "111",
+  "ConsentContext.IsAdminConsent": true,
+  "InitiatedBy": "111",
+  "azure.activitylogs.operation_name": "111",
+  "user_agent.name": "111",
+  "azure.signinlogs.properties.risk_state": "111",
+  "riskEventType": "111",
+  "azure.auditlogs.properties.logged_by_service": "111"
 }

src/test/resources/cloudtrail-sample.json

@@ -16,16 +16,21 @@
   "aws-cloudtrail-event_name": "123",
   "aws-cloudtrail-event_source": "123",
   "aws-cloudtrail-event_type": "123",
-  "aws-cloudtrail-error_message": "123",
+  "aws.cloudtrail.error_message": "123",
   "aws-cloudtrail-error_code": "123",
-  "aws-cloudtrail-response_elements-text": "123",
-  "aws-cloudtrail-response_elements-pending_modified_values-master_user_password": "123",
+  "aws.cloudtrail.response_elements.text": "123",
+  "aws.cloudtrail.response_elements.pending_modified_values.master_user_password": "123",
   "aws-cloudtrail-response_elements-publicly_accessible": "123",
   "aws-cloudtrail-request_parameters-arn": "123",
-  "aws-cloudtrail-request_parameters-attribute": "123",
+  "aws.cloudtrail.request_parameters.attribute": "123",
   "aws-cloudtrail-request_parameters-username": "123",
-  "aws-cloudtrail-request_parameters-container_definitions-command": "123",
-  "aws-cloudtrail-user_identity-session_context-session_issuer-type": "123",
+  "aws.cloudtrail.request_parameters.container_definitions.command": "123",
+  "aws.cloudtrail.user_identity.session_context.session_issuer.type": "123",
   "aws-cloudtrail-user_identity-arn": "123",
+  "aws.cloudtrail.user_identity.type": "123",
+  "aws.cloudtrail.response_elements.publicly_accessible": "123",
+  "aws.cloudtrail.user_agent": "123",
+  "requestParameters": "123",
+  "type": "123",
   "eventTime": "2022-12-27T20:29:31.734Z"
 }

src/test/resources/s3-sample.json

@@ -8,7 +8,7 @@
   "Operation": "123",
   "RequestURI_key": "123",
   "aws.s3access.requester": "1234",
-  "aws-cloudtrail-event_source": "123",
-  "aws-cloudtrail-event_name": "123",
+  "aws.cloudtrail.event_source": "123",
+  "aws.cloudtrail.event_name": "123",
   "eventTime": "123"
 }

src/test/resources/waf-sample.json

@@ -53,5 +53,6 @@
     {
       "name": "awswaf:managed:aws:bot-control:signal:known_bot_data_center"
     }
-  ]
+  ],
+  "waf.request.headers.user_agent": "111"
 }