@@ -163,7 +163,7 @@ def test_requirements_fields(
163163
164164 # Search Query
165165 record_property (
166- "stanza_name " , splunk_searchtime_fields_requirements ["escaped_event" ]
166+ "Event_with " , splunk_searchtime_fields_requirements ["escaped_event" ]
167167 )
168168 record_property ("fields" , splunk_searchtime_fields_requirements ["fields" ])
169169 record_property (
@@ -187,11 +187,13 @@ def test_requirements_fields(
187187
188188 if splunk_searchtime_fields_requirements .get ("unique_identifier" ):
189189 record_property (
190- "stanza_name" , splunk_searchtime_fields_requirements ["unique_identifier" ]
191- )
192- unique_identifier = splunk_searchtime_fields_requirements ["unique_identifier" ]
193-
194- search = f"search { index_list } { basic_search } unique_identifier=\" { unique_identifier } \" | fields *"
190+ "Event_with" , splunk_searchtime_fields_requirements ["unique_identifier" ]
191+ )
192+ unique_identifier = splunk_searchtime_fields_requirements [
193+ "unique_identifier"
194+ ]
195+
196+ search = f'search { index_list } { basic_search } unique_identifier="{ unique_identifier } " | fields *'
195197 else :
196198 search = f"search { index_list } { basic_search } { escaped_event } | fields *"
197199
@@ -230,12 +232,16 @@ def test_requirements_fields(
230232 if not wrong_value_fields == {}:
231233 self .logger .error ("Wrong field values:\n " + wrong_values_table )
232234
233- assert wrong_value_fields == {}, (
235+ error_message = (
234236 f"\n Not all required fields have correct values or some fields are missing in Splunk. Wrong field values:\n { wrong_values_table } "
235237 f"{ format_search_query_log (search )} "
236- f"Test failed for event: { escaped_event } \n "
237238 )
238239
240+ if splunk_searchtime_fields_requirements .get ("unique_identifier" ):
241+ error_message += f"Test failed for event: { escaped_event } \n "
242+
243+ assert wrong_value_fields == {}, error_message
244+
239245 @pytest .mark .splunk_searchtime_fields
240246 @pytest .mark .splunk_searchtime_fields_negative
241247 def test_props_fields_no_dash_not_empty (
@@ -415,19 +421,19 @@ def test_datamodels(
415421
416422 if splunk_searchtime_fields_datamodels .get ("unique_identifier" ):
417423 record_property (
418- "stanza_name " , splunk_searchtime_fields_datamodels ["unique_identifier" ]
419- )
424+ "Event_with " , splunk_searchtime_fields_datamodels ["unique_identifier" ]
425+ )
420426 unique_identifier = splunk_searchtime_fields_datamodels ["unique_identifier" ]
421427
422428 self .logger .info (
423- f" Testing for tag { datamodels } with unique_identifier=\ "{ unique_identifier } \" "
424- )
425-
426- search = f" search { index_list } unique_identifier=\ "{ unique_identifier } \ " | fields *"
429+ f' Testing for tag { datamodels } with unique_identifier="{ unique_identifier } "'
430+ )
431+
432+ search = f' search { index_list } unique_identifier="{ unique_identifier } " | fields *'
427433 else :
428434 self .logger .info (
429- f"Testing for tag { datamodels } with tag_query { escaped_event } "
430- )
435+ f"Testing for tag { datamodels } with tag_query { escaped_event } "
436+ )
431437 search = f"search { index_list } { escaped_event } | fields *"
432438
433439 self .logger .info (f"Search: { search } " )
@@ -487,9 +493,12 @@ def test_datamodels(
487493 ],
488494 )
489495
490- assert (
491- missing_datamodels == [] and wrong_datamodels == []
492- ), f"Incorrect datamodels found:\n { exc_message } "
496+ error_message = f"Incorrect datamodels found:\n { exc_message } "
497+
498+ if splunk_searchtime_fields_datamodels .get ("unique_identifier" ):
499+ error_message += f"\n Test failed for event: { escaped_event } \n "
500+
501+ assert missing_datamodels == [] and wrong_datamodels == [], error_message
493502
494503 @pytest .mark .splunk_searchtime_fields
495504 @pytest .mark .splunk_searchtime_fields_eventtypes
0 commit comments