From df8b175e8645720f64a7f2fe6375fb1748b148cf Mon Sep 17 00:00:00 2001
From: Aaron Stein <aaron.stein@clever.com>
Date: Fri, 23 Aug 2019 13:28:00 -0700
Subject: [PATCH] add decode test

---
 decode/decode_test.go | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/decode/decode_test.go b/decode/decode_test.go
index 12136c0..301a4e3 100644
--- a/decode/decode_test.go
+++ b/decode/decode_test.go
@@ -196,6 +196,18 @@ func TestSyslogDecoding(t *testing.T) {
 			},
 			ExpectedError: nil,
 		},
+		Spec{
+			Title: "Parses Rsyslog_ FileFormat with simple log body for slowquery",
+			Input: `2017-06-26T23:32:23.285001+00:00 aws-rds production-aurora-test-db: Slow query: select * from table.`,
+			ExpectedOutput: map[string]interface{}{
+				"timestamp":        logTime,
+				"hostname":         "aws-rds",
+				"programname":      "production-aurora-test-db",
+				"rawlog":           "Slow query: select * from table.",
+				"decoder_msg_type": "syslog",
+			},
+			ExpectedError: nil,
+		},
 		Spec{
 			Title:          "Fails to parse non-RSyslog log line",
 			Input:          `not rsyslog`,