public void customPattern() { EventLogRecordFacade record = A.Fake <EventLogRecordFacade>(); A.CallTo(() => record.Properties) .Returns(new List <EventPropertyFacade> { new("sshd: PID 29722: Failed password for invalid user root from 71.194.180.25 port 48316 ssh2") });
public void builtInPattern() { EventLogRecordFacade record = A.Fake <EventLogRecordFacade>(); A.CallTo(() => record.GetPropertyValues(A <EventLogPropertySelectorFacade> ._)).Returns(new object[] { "141.98.9.20" }); IPAddress?actualAddress = null; listener.failure += (_, address) => actualAddress = address; watcherFacades[0].EventRecordWritten += Raise.With(null, new EventRecordWrittenEventArgsFacade(record)); A.CallTo(() => record.GetPropertyValues(A <EventLogPropertySelectorFacade> .That.Matches(selector => selector.propertyQueries.SequenceEqual(new[] { "Event/EventData/Data[@Name=\"IpAddress\"]" })))).MustHaveHappened(); A.CallTo(() => record.Properties).MustNotHaveHappened(); Assert.Equal(IPAddress.Parse("141.98.9.20"), actualAddress); }