kelora 1.5.0

A command-line log analysis tool with embedded Rhai scripting
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94

mod common;
use common::*;

#[test]
fn test_ilike_filters_unicode_case_fold() {
    let input = r#"{"message":"Timeout in service"}
{"message":"user timeout"}
{"message":"all good"}"#;

    let (stdout, stderr, exit_code) = run_kelora_with_input(
        &["-f", "json", "--filter", r#"e.message.ilike("*timeout*")"#],
        input,
    );

    assert_eq!(exit_code, 0, "kelora should exit successfully: {stderr}");
    let lines: Vec<&str> = stdout.trim().lines().collect();
    assert_eq!(lines.len(), 2, "Two events should match ilike pattern");
    assert!(
        lines.iter().any(|line| line.contains("Timeout in service")),
        "Uppercase variant should match"
    );
    assert!(
        lines.iter().any(|line| line.contains("user timeout")),
        "Lowercase variant should match"
    );
}

#[test]
fn test_like_respects_case_and_anchoring() {
    let input = r#"{"message":"Timeout in service"}
{"message":"user timeout"}
{"message":"Timeout"}"#;

    let (stdout, stderr, exit_code) = run_kelora_with_input(
        &["-f", "json", "--filter", r#"e.message.like("Timeout*")"#],
        input,
    );

    assert_eq!(exit_code, 0, "kelora should exit successfully: {stderr}");
    let lines: Vec<&str> = stdout.trim().lines().collect();
    assert_eq!(
        lines.len(),
        2,
        "Only messages starting with 'Timeout' should match"
    );
    assert!(
        lines.iter().all(|line| line.contains("Timeout")),
        "All matched lines should start with Timeout"
    );
    assert!(
        !lines.iter().any(|line| line.contains("user timeout")),
        "Lowercase timeout should not match like()"
    );
}

#[test]
fn test_has_ignores_unit_values() {
    let input = r#"{"user":"alice","message":"active"}
{"user":null,"message":"cleared"}
{"message":"missing"}"#;

    let (stdout, stderr, exit_code) =
        run_kelora_with_input(&["-f", "json", "--filter", r#"e.has("user")"#], input);

    assert_eq!(exit_code, 0, "kelora should exit successfully: {stderr}");
    let lines: Vec<&str> = stdout.trim().lines().collect();
    assert_eq!(
        lines.len(),
        1,
        "Only the non-null user should survive the filter"
    );
    assert!(
        lines[0].contains("user='alice'"),
        "First event should remain"
    );
}

#[test]
fn test_matches_errors_on_invalid_regex() {
    let input = r#"{"message":"user not found"}"#;
    let (stdout, stderr, exit_code) = run_kelora_with_input(
        &["-f", "json", "--filter", r#"e.message.matches("(")"#],
        input,
    );

    assert_ne!(
        exit_code, 0,
        "Invalid regex should cause non-zero exit code. Stdout: {stdout}, stderr: {stderr}"
    );
    assert!(
        stderr.contains("Invalid regex pattern"),
        "stderr should mention invalid regex: {stderr}"
    );
}