Skip to content

Commit

Permalink
Don't keep ip field - it can be coming from different places
Browse files Browse the repository at this point in the history
  • Loading branch information
smalyshev committed Oct 22, 2024
1 parent cd1c981 commit f28b4e0
Showing 1 changed file with 6 additions and 6 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -550,7 +550,7 @@ public void testLimitThenEnrichRemote() {
FROM *:events,events
| LIMIT 25
| eval ip= TO_STR(host)
| %s | KEEP host, timestamp, user, ip, os
| %s | KEEP host, timestamp, user, os
""", enrichHosts(Enrich.Mode.REMOTE));
try (EsqlQueryResponse resp = runQuery(query, requestIncludeMeta)) {
var values = getValuesList(resp);
Expand All @@ -563,11 +563,11 @@ public void testLimitThenEnrichRemote() {
values.subList(0, 5),
equalTo(
List.of(
List.of("192.168.1.2", 1L, "andres", "192.168.1.2", "Windows"),
Arrays.asList("192.168.1.25", 1L, "park", (String) null, (String) null),
List.of("192.168.1.3", 1L, "matthew", "192.168.1.3", "MacOS"),
List.of("192.168.1.5", 2L, "akio", "192.168.1.5", "Android"),
List.of("192.168.1.5", 2L, "simon", "192.168.1.5", "Android")
List.of("192.168.1.2", 1L, "andres", "Windows"),
Arrays.asList("192.168.1.25", 1L, "park", (String) null),
List.of("192.168.1.3", 1L, "matthew", "MacOS"),
List.of("192.168.1.5", 2L, "akio", "Android"),
List.of("192.168.1.5", 2L, "simon", "Android")
)
)
);
Expand Down

0 comments on commit f28b4e0

Please sign in to comment.