class_docstr: Test class for the OneLoginApp
class_docstr_tok: ["Test","class","for","the","OneLoginApp"]
docstr: Helper function for returning sample onelogin events
docstr_tok: ["Helper","function","for","returning","sample","onelogin","events"]
code: def _get_sample_events(count, next_link):
      """Helper function for returning sample onelogin events"""
      event = {
          "id": 123,
          "created_at": "2017-10-05T18:11:32Z",
          "account_id": 1234,
          "user_id": 321,
          "event_type_id": 4321,
          "notes": "Notes",
          "ipaddr": "0.0.0.0",  # nosec
          "actor_user_id": 987,
          "assuming_acting_user_id": 654,
          "role_id": 456,
          "app_id": 123456,
          "group_id": 98765,
          "otp_device_id": 11111,
          "policy_id": 22222,
          "actor_system": "System",
          "custom_message": "Message",
          "role_name": "Role",
          "app_name": "App Name",
          "group_name": "Group Name",
          "actor_user_name": "",
          "user_name": "username",
          "policy_name": "Policy Name",
          "otp_device_name": "OTP Device Name",
          "operation_name": "Operation Name",
          "directory_sync_run_id": 7777,
          "directory_id": 6666,
          "resolution": "Resolved",
          "client_id": 11223344,
          "resource_type_id": 44332211,
          "error_description": "ERROR ERROR",
      }
      data = [event] * count
  
      return {"data": data, "pagination": {"next_link": next_link}}
  
imports: import os
  from mock import Mock, patch
  from moto import mock_ssm
  from nose.tools import assert_equal, assert_false, assert_count_equal
  from streamalert.apps._apps.onelogin import OneLoginApp
  from tests.unit.streamalert.apps.test_helpers import get_event, put_mock_params
  from tests.unit.streamalert.shared.test_config import get_mock_lambda_context
label_desc: Use image node_id 8 for calling the TestOneLoginApp obj's underlying member method code with example usage: obj._get_sample_events(count, next_link) and returns: dict