From 2d17821f080add78b7d80da590ff8aafd188d01b Mon Sep 17 00:00:00 2001 From: Tiago Costa Date: Wed, 3 Mar 2021 19:48:54 +0000 Subject: [PATCH] Revert "Make tests deterministic by providing unique timestamps (#93350)" This reverts commit 3ce614fe4616845dafcff547e5b25244093e85e1. --- .../tests/create_threat_matching.ts | 33 ++++++++++--------- .../filebeat/threat_intel/data.json | 8 ++--- 2 files changed, 21 insertions(+), 20 deletions(-) diff --git a/x-pack/test/detection_engine_api_integration/security_and_spaces/tests/create_threat_matching.ts b/x-pack/test/detection_engine_api_integration/security_and_spaces/tests/create_threat_matching.ts index 240f3cc8e3d25..59526fd5abb8f 100644 --- a/x-pack/test/detection_engine_api_integration/security_and_spaces/tests/create_threat_matching.ts +++ b/x-pack/test/detection_engine_api_integration/security_and_spaces/tests/create_threat_matching.ts @@ -35,7 +35,8 @@ export default ({ getService }: FtrProviderContext) => { /** * Specific api integration tests for threat matching rule type */ - describe('create_threat_matching', () => { + // FLAKY: https://github.com/elastic/kibana/issues/93152 + describe.skip('create_threat_matching', () => { describe('validation errors', () => { it('should give an error that the index must exist first if it does not exist before creating a rule', async () => { const { body } = await supertest @@ -600,21 +601,6 @@ export default ({ getService }: FtrProviderContext) => { }, { indicator: [ - { - description: 'this should match auditbeat/hosts on both port and ip', - first_seen: '2021-01-26T11:06:03.000Z', - ip: '45.115.45.3', - matched: { - atomic: '45.115.45.3', - id: '978785', - index: 'filebeat-8.0.0-2021.01.26-000001', - field: 'source.ip', - type: 'url', - }, - port: 57324, - provider: 'geenensp', - type: 'url', - }, { description: "domain should match the auditbeat hosts' data's source.ip", domain: '159.89.119.67', @@ -633,6 +619,21 @@ export default ({ getService }: FtrProviderContext) => { scheme: 'http', }, }, + { + description: 'this should match auditbeat/hosts on both port and ip', + first_seen: '2021-01-26T11:06:03.000Z', + ip: '45.115.45.3', + matched: { + atomic: '45.115.45.3', + id: '978785', + index: 'filebeat-8.0.0-2021.01.26-000001', + field: 'source.ip', + type: 'url', + }, + port: 57324, + provider: 'geenensp', + type: 'url', + }, { description: 'this should match auditbeat/hosts on both port and ip', first_seen: '2021-01-26T11:06:03.000Z', diff --git a/x-pack/test/functional/es_archives/filebeat/threat_intel/data.json b/x-pack/test/functional/es_archives/filebeat/threat_intel/data.json index 8f3c6a7d941de..0cbc7f37bd519 100644 --- a/x-pack/test/functional/es_archives/filebeat/threat_intel/data.json +++ b/x-pack/test/functional/es_archives/filebeat/threat_intel/data.json @@ -4,7 +4,7 @@ "id": "978783", "index": "filebeat-8.0.0-2021.01.26-000001", "source": { - "@timestamp": "2021-01-26T11:09:00.000Z", + "@timestamp": "2021-01-26T11:09:05.529Z", "agent": { "ephemeral_id": "b7b56c3e-1f27-4c69-96f4-aa9ca47888d0", "id": "69acb5f0-1e79-4cfe-a4dc-e0dbf229ff51", @@ -73,7 +73,7 @@ "id": "978784", "index": "filebeat-8.0.0-2021.01.26-000001", "source": { - "@timestamp": "2021-01-26T11:09:01.000Z", + "@timestamp": "2021-01-26T11:09:05.529Z", "agent": { "ephemeral_id": "b7b56c3e-1f27-4c69-96f4-aa9ca47888d0", "id": "69acb5f0-1e79-4cfe-a4dc-e0dbf229ff51", @@ -142,7 +142,7 @@ "id": "978785", "index": "filebeat-8.0.0-2021.01.26-000001", "source": { - "@timestamp": "2021-01-26T11:09:02.000Z", + "@timestamp": "2021-01-26T11:09:05.529Z", "agent": { "ephemeral_id": "b7b56c3e-1f27-4c69-96f4-aa9ca47888d0", "id": "69acb5f0-1e79-4cfe-a4dc-e0dbf229ff51", @@ -212,7 +212,7 @@ "id": "978787", "index": "filebeat-8.0.0-2021.01.26-000001", "source": { - "@timestamp": "2021-01-26T11:09:03.000Z", + "@timestamp": "2021-01-26T11:09:05.529Z", "agent": { "ephemeral_id": "b7b56c3e-1f27-4c69-96f4-aa9ca47888d0", "id": "69acb5f0-1e79-4cfe-a4dc-e0dbf229ff51",