From fbe40bd1e842fcdbba57ab1ec4947ee3a53d80ea Mon Sep 17 00:00:00 2001
From: Thomas Patzke <thomas@patzke.org>
Date: Sun, 29 Mar 2020 13:41:03 +0200
Subject: [PATCH] Fixed Elasticsearch test

* Splitted into separate action
* Install dependencies
---
 .github/workflows/sigma-test.yml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/sigma-test.yml b/.github/workflows/sigma-test.yml
index eee872989..291d54683 100644
--- a/.github/workflows/sigma-test.yml
+++ b/.github/workflows/sigma-test.yml
@@ -23,7 +23,14 @@ jobs:
       run: |
         python -m pip install --upgrade pip
         pip install -r tools/requirements.txt -r tools/requirements-devel.txt -r tools/requirements-misp.txt -r tests/requirements-test.txt
-    - name: Test with Makefile
+    - name: Test Sigma Tools and Rules
       run: |
         make test
+    - name: Test Generated Elasticsearch Query Strings
+      run: |
+        wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | apt-key add -
+        apt install -y apt-transport-https
+        echo "deb https://artifacts.elastic.co/packages/7.x/apt stable main" >> /etc/apt/sources.list.d/elastic.list
+        apt update
+        apt install -y elasticsearch
         make test-backend-es-qs