NetwitnessSAGetEvents

Returns all the RSA NetWitness SA events in the defined time range.

python · RSA NetWitness Security Analytics

Details

ID	`NetwitnessSAGetEvents`
Language	python
From Version	5.0.0
Docker Image	`demisto/python3:3.12.13.10116658`
Tags	RSA NetWitness Security Analytics

Source

NetwitnessSAGetEvents.py NetwitnessSAGetEvents_test.py NetwitnessSAGetEvents.yml

Download History Raw

import demistomock as demisto


def test_netwitness_im_get_events(mocker):
    """
    Given:
        - response mock.
    When:
        - running NetwitnessSAGetEvents script.
    Then:
        - Ensure that the results were built correctly.
    """
    from NetwitnessSAGetEvents import netwitness_im_get_events

    entry = [{"Type": 3, "Contents": {"events": {"time": 0, "meta": [{"name": "name", "value": "value"}]}}}]
    mocker.patch.object(demisto, "executeCommand", return_value=entry)
    results_mock = mocker.patch.object(demisto, "results")
    netwitness_im_get_events()
    assert results_mock.call_args[0][0]["Contents"] == [{"meta.name": "value", "time": "1970-01-01 00:00:00"}]