Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Failing test: Detection Engine - General Execution Logic Integration Tests - ESS Env - Trial License.x-pack/test/security_solution_api_integration/test_suites/detections_response/detection_engine/rule_execution_logic/general_logic/trial_license_complete_tier/synthetic_source·ts - Rule execution logic API @ess @serverless synthetic source synthetic source limitations should convert dot-notation to nested objects #208294

Open
kibanamachine opened this issue Jan 25, 2025 · 4 comments
Labels
failed-es-promotion failed-test A test failure on a tracked branch, potentially flaky-test Team:Detection Engine Security Solution Detection Engine Area

Comments

@kibanamachine
Copy link
Contributor

kibanamachine commented Jan 25, 2025

A test failed on a tracked branch

JestAssertionError: expect(received).toEqual(expected) // deep equality

- Expected  - 3
+ Received  + 0

  Object {
    "@timestamp": "2020-10-28T06:30:00.000Z",
-   "agent": Object {
-     "name": "agent-1",
-   },
    "agent.name": "agent-1",
    "event.kind": "signal",
    "id": "8e9c13f0-e065-4984-bc3d-2ae09bc2aa0c",
    "kibana.alert.ancestors": Array [
      Object {
        "depth": 0,
        "id": "Wzqrm5QBkKQOP2IVzs_y",
        "index": "ecs_compliant",
        "type": "event",
      },
    ],
    "kibana.alert.depth": 1,
    "kibana.alert.intended_timestamp": "2020-10-28T06:30:00.000Z",
    "kibana.alert.last_detected": "2025-01-25T04:15:15.980Z",
    "kibana.alert.original_time": "2020-10-28T06:00:00.000Z",
    "kibana.alert.reason": "event created high alert Alert Testing Query.",
    "kibana.alert.risk_score": 1,
    "kibana.alert.rule.actions": Array [],
    "kibana.alert.rule.author": Array [],
    "kibana.alert.rule.category": "Custom Query Rule",
    "kibana.alert.rule.consumer": "siem",
    "kibana.alert.rule.created_at": "2025-01-25T04:15:15.784Z",
    "kibana.alert.rule.created_by": "elastic",
    "kibana.alert.rule.description": "Tests a simple query",
    "kibana.alert.rule.enabled": true,
    "kibana.alert.rule.exceptions_list": Array [],
    "kibana.alert.rule.execution.timestamp": "2025-01-25T04:15:15.980Z",
    "kibana.alert.rule.execution.type": "manual",
    "kibana.alert.rule.execution.uuid": "e2256d26-6d17-4ff4-ab65-cda52574a8f8",
    "kibana.alert.rule.false_positives": Array [],
    "kibana.alert.rule.from": "now-1h",
    "kibana.alert.rule.immutable": false,
    "kibana.alert.rule.indices": Array [
      "ecs_compliant",
    ],
    "kibana.alert.rule.interval": "1h",
    "kibana.alert.rule.max_signals": 100,
    "kibana.alert.rule.name": "Alert Testing Query",
    "kibana.alert.rule.parameters": Object {
      "author": Array [],
      "description": "Tests a simple query",
      "exceptions_list": Array [],
      "false_positives": Array [],
      "from": "now-1h",
      "immutable": false,
      "index": Array [
        "ecs_compliant",
      ],
      "language": "kuery",
      "max_signals": 100,
      "query": "id:8e9c13f0-e065-4984-bc3d-2ae09bc2aa0c",
      "references": Array [],
      "related_integrations": Array [],
      "required_fields": Array [],
      "risk_score": 1,
      "risk_score_mapping": Array [],
      "rule_id": "rule-1",
      "rule_source": Object {
        "type": "internal",
      },
      "setup": "",
      "severity": "high",
      "severity_mapping": Array [],
      "threat": Array [],
      "to": "now",
      "type": "query",
      "version": 1,
    },
    "kibana.alert.rule.producer": "preview-producer",
    "kibana.alert.rule.references": Array [],
    "kibana.alert.rule.revision": 0,
    "kibana.alert.rule.risk_score": 1,
    "kibana.alert.rule.risk_score_mapping": Array [],
    "kibana.alert.rule.rule_id": "rule-1",
    "kibana.alert.rule.rule_type_id": "siem.queryRule",
    "kibana.alert.rule.severity": "high",
    "kibana.alert.rule.severity_mapping": Array [],
    "kibana.alert.rule.tags": Array [],
    "kibana.alert.rule.threat": Array [],
    "kibana.alert.rule.to": "now",
    "kibana.alert.rule.type": "query",
    "kibana.alert.rule.updated_at": "2025-01-25T04:15:15.784Z",
    "kibana.alert.rule.updated_by": "elastic",
    "kibana.alert.rule.uuid": "002def4e-a58d-48b3-a5e5-30c01af2d5bb",
    "kibana.alert.rule.version": 1,
    "kibana.alert.severity": "high",
    "kibana.alert.start": "2025-01-25T04:15:15.980Z",
    "kibana.alert.status": "active",
    "kibana.alert.uuid": "aab67a07548b040fe96a9d38cd5c7398ea2b18424555abb80f69633ade77f9b6",
    "kibana.alert.workflow_assignee_ids": Array [],
    "kibana.alert.workflow_status": "open",
    "kibana.alert.workflow_tags": Array [],
    "kibana.space_ids": Array [
      "default",
    ],
    "kibana.version": "9.0.0-SNAPSHOT",
  }
    at Context.<anonymous> (synthetic_source.ts:81:42)
    at processTicksAndRejections (node:internal/process/task_queues:95:5)
    at Object.apply (wrap_function.js:74:16) {
  matcherResult: {
    actual: {
      'kibana.alert.rule.execution.timestamp': '2025-01-25T04:15:15.980Z',
      'kibana.alert.start': '2025-01-25T04:15:15.980Z',
      'kibana.alert.last_detected': '2025-01-25T04:15:15.980Z',
      'kibana.version': '9.0.0-SNAPSHOT',
      'kibana.alert.rule.parameters': [Object],
      'kibana.alert.rule.category': 'Custom Query Rule',
      'kibana.alert.rule.consumer': 'siem',
      'kibana.alert.rule.execution.uuid': 'e2256d26-6d17-4ff4-ab65-cda52574a8f8',
      'kibana.alert.rule.name': 'Alert Testing Query',
      'kibana.alert.rule.producer': 'preview-producer',
      'kibana.alert.rule.revision': 0,
      'kibana.alert.rule.rule_type_id': 'siem.queryRule',
      'kibana.alert.rule.uuid': '002def4e-a58d-48b3-a5e5-30c01af2d5bb',
      'kibana.space_ids': [Array],
      'kibana.alert.rule.tags': [],
      '@timestamp': '2020-10-28T06:30:00.000Z',
      id: '8e9c13f0-e065-4984-bc3d-2ae09bc2aa0c',
      'agent.name': 'agent-1',
      'event.kind': 'signal',
      'kibana.alert.original_time': '2020-10-28T06:00:00.000Z',
      'kibana.alert.ancestors': [Array],
      'kibana.alert.status': 'active',
      'kibana.alert.workflow_status': 'open',
      'kibana.alert.depth': 1,
      'kibana.alert.reason': 'event created high alert Alert Testing Query.',
      'kibana.alert.severity': 'high',
      'kibana.alert.risk_score': 1,
      'kibana.alert.rule.actions': [],
      'kibana.alert.rule.author': [],
      'kibana.alert.rule.created_at': '2025-01-25T04:15:15.784Z',
      'kibana.alert.rule.created_by': 'elastic',
      'kibana.alert.rule.description': 'Tests a simple query',
      'kibana.alert.rule.enabled': true,
      'kibana.alert.rule.exceptions_list': [],
      'kibana.alert.rule.false_positives': [],
      'kibana.alert.rule.from': 'now-1h',
      'kibana.alert.rule.immutable': false,
      'kibana.alert.rule.interval': '1h',
      'kibana.alert.rule.indices': [Array],
      'kibana.alert.rule.max_signals': 100,
      'kibana.alert.rule.references': [],
      'kibana.alert.rule.risk_score_mapping': [],
      'kibana.alert.rule.rule_id': 'rule-1',
      'kibana.alert.rule.severity_mapping': [],
      'kibana.alert.rule.threat': [],
      'kibana.alert.rule.to': 'now',
      'kibana.alert.rule.type': 'query',
      'kibana.alert.rule.updated_at': '2025-01-25T04:15:15.784Z',
      'kibana.alert.rule.updated_by': 'elastic',
      'kibana.alert.rule.version': 1,
      'kibana.alert.uuid': 'aab67a07548b040fe96a9d38cd5c7398ea2b18424555abb80f69633ade77f9b6',
      'kibana.alert.workflow_tags': [],
      'kibana.alert.workflow_assignee_ids': [],
      'kibana.alert.rule.risk_score': 1,
      'kibana.alert.rule.severity': 'high',
      'kibana.alert.intended_timestamp': '2020-10-28T06:30:00.000Z',
      'kibana.alert.rule.execution.type': 'manual'
    },
    expected: {
      'kibana.alert.rule.execution.timestamp': '2025-01-25T04:15:15.980Z',
      'kibana.alert.start': '2025-01-25T04:15:15.980Z',
      'kibana.alert.last_detected': '2025-01-25T04:15:15.980Z',
      'kibana.version': '9.0.0-SNAPSHOT',
      'kibana.alert.rule.parameters': [Object],
      'kibana.alert.rule.category': 'Custom Query Rule',
      'kibana.alert.rule.consumer': 'siem',
      'kibana.alert.rule.execution.uuid': 'e2256d26-6d17-4ff4-ab65-cda52574a8f8',
      'kibana.alert.rule.name': 'Alert Testing Query',
      'kibana.alert.rule.producer': 'preview-producer',
      'kibana.alert.rule.revision': 0,
      'kibana.alert.rule.rule_type_id': 'siem.queryRule',
      'kibana.alert.rule.uuid': '002def4e-a58d-48b3-a5e5-30c01af2d5bb',
      'kibana.space_ids': [Array],
      'kibana.alert.rule.tags': [],
      '@timestamp': '2020-10-28T06:30:00.000Z',
      id: '8e9c13f0-e065-4984-bc3d-2ae09bc2aa0c',
      'agent.name': 'agent-1',
      'event.kind': 'signal',
      'kibana.alert.original_time': '2020-10-28T06:00:00.000Z',
      'kibana.alert.ancestors': [Array],
      'kibana.alert.status': 'active',
      'kibana.alert.workflow_status': 'open',
      'kibana.alert.depth': 1,
      'kibana.alert.reason': 'event cr
[report_failure] output truncated to 8192 characters

First failure: kibana-elasticsearch-snapshot-verify - main

@kibanamachine kibanamachine added the failed-test A test failure on a tracked branch, potentially flaky-test label Jan 25, 2025
@botelastic botelastic bot added the needs-team Issues missing a team label label Jan 25, 2025
@kibanamachine kibanamachine added failed-es-promotion Team:Detection Engine Security Solution Detection Engine Area labels Jan 25, 2025
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-detection-engine (Team:Detection Engine)

@botelastic botelastic bot removed the needs-team Issues missing a team label label Jan 25, 2025
@kibanamachine
Copy link
Contributor Author

New failure: kibana-elasticsearch-snapshot-verify - main

@kibanamachine
Copy link
Contributor Author

New failure: kibana-elasticsearch-snapshot-verify - main

@kibanamachine
Copy link
Contributor Author

New failure: kibana-elasticsearch-snapshot-verify - main

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
failed-es-promotion failed-test A test failure on a tracked branch, potentially flaky-test Team:Detection Engine Security Solution Detection Engine Area
Projects
None yet
Development

No branches or pull requests

2 participants