class_docstr: Tests for RulesEngine
class_docstr_tok: ["Tests","for","RulesEngine"]
docstr: RulesEngine - Run, Matcher Failure
docstr_tok: ["RulesEngine","-","Run",",","Matcher","Failure"]
code: def test_run_matcher_failure(self):
      """RulesEngine - Run, Matcher Failure"""
      self._rules_engine._threat_intel = None
      with patch.object(
          self._rules_engine, "_process_subkeys"
      ), patch.object(
          self._rules_engine, "_alert_forwarder"
      ), patch.object(
          self._rules_engine, "_rule_analysis"
      ) as analysis_mock:
          records = [
              {
                  "record": {"key_01": "value_01"},
                  "log_schema_type": "log_type",
              }
          ]
  
          self._rules_engine.run(records)
          analysis_mock.assert_not_called()
  
imports: from datetime import datetime, timedelta
  from mock import Mock, patch, PropertyMock
  from nose.tools import assert_equal, assert_false, assert_true
  from publishers.community.generic import remove_internal_fields
  from streamalert.shared.publisher import AlertPublisher, Register, DefaultPublisher
  import streamalert.rules_engine.rules_engine
  from streamalert.rules_engine.rules_engine import RulesEngine
label_desc: Use image node_id 42 for calling the TestRulesEngine obj's underlying member method code with example usage: obj.test_run_matcher_failure() without return types