[Security Solution] Switch cypress and api integration test data from es archive to programmatically generated in certain files #120279
Labels
bug
Fixes for quality problems that affect the customer experience
Team:Detection Alerts
Security Detection Alerts Area Team
Team:Detections and Resp
Security Detection Response Team
Team:Security Solution Platform
Security Solution Platform Team
Team: SecuritySolution
Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.
technical debt
Improvement of the software architecture and operational architecture
Related to #116374
In some of the Security Solution Rules cypress and API integration tests, we rely on es archive data that has been timestamped years ago and just extend the rule look back time to cover the time period. This isn't a reliable practice and while the 50,000 hours value we often use should cover our current test data, there are tests and use cases that can't have a look back time hardcoded.
We should look into a different approach of generating data to create a more realistic testing environment and not have to worry about tests breaking because some arbitrary time has passed
This would also allow us to unskip and update the tests skipped in the linked PR. More detail about the specific tests is listed in its summary
The text was updated successfully, but these errors were encountered: