Updated unit test to check for signal id enrichment

elastic · Feb 23, 2022 · 5d0e015 · 5d0e015
1 parent f1a8c68
commit 5d0e015
Showing 1 changed file with 18 additions and 1 deletion.
diff --git a/...ugins/security_solution/server/lib/detection_engine/signals/send_telemetry_events.test.ts b/...ugins/security_solution/server/lib/detection_engine/signals/send_telemetry_events.test.ts
@@ -33,6 +33,9 @@ describe('sendAlertTelemetry', () => {
               data_stream: {
                 dataset: 'endpoint.events',
               },
+              event: {
+                id: 'foo',
+              },
             },
           },
           {
@@ -47,6 +50,9 @@ describe('sendAlertTelemetry', () => {
                 dataset: 'endpoint.alerts',
                 other: 'x',
               },
+              event: {
+                id: 'bar',
+              },
             },
           },
           {
@@ -58,12 +64,19 @@ describe('sendAlertTelemetry', () => {
               '@timestamp': 'x',
               key3: 'hello',
               data_stream: {},
+              event: {
+                id: 'baz',
+              },
             },
           },
         ],
       },
     };
-    const joinMap = new Map<string, string>();
+    const joinMap = new Map<string, string>([
+      ['foo', '1234'],
+      ['bar', 'abcd'],
+      ['baz', '4567'],
+    ]);
     const sources = selectEvents(filteredEvents, joinMap);
     expect(sources).toStrictEqual([
       {
@@ -73,6 +86,10 @@ describe('sendAlertTelemetry', () => {
           dataset: 'endpoint.alerts',
           other: 'x',
         },
+        event: {
+          id: 'bar',
+        },
+        signal_id: 'abcd',
       },
     ]);
   });