Failing test: X-Pack Detection Engine API Integration Tests.x-pack/test/detection_engine_api_integration/security_and_spaces/group10/import_rules·ts - detection engine api security and spaces enabled - Group 10 import_rules importing rules with an index importing with exceptions should be able to import a rule and an exception list

[kibanamachine]

A test failed on a tracked branch

Error: expected { success: false,
  success_count: 0,
  rules_count: 1,
  errors: [ { rule_id: 'rule-1', error: [Object] } ],
  exceptions_errors: [],
  exceptions_success: true,
  exceptions_success_count: 1,
  action_connectors_success: true,
  action_connectors_success_count: 0,
  action_connectors_errors: [],
  action_connectors_warnings: [] } to sort of equal { success: true,
  success_count: 1,
  rules_count: 1,
  errors: [],
  exceptions_errors: [],
  exceptions_success: true,
  exceptions_success_count: 1,
  action_connectors_success: true,
  action_connectors_success_count: 0,
  action_connectors_errors: [],
  action_connectors_warnings: [] }
    at Assertion.assert (expect.js:100:11)
    at Assertion.eql (expect.js:244:8)
    at Context.<anonymous> (import_rules.ts:1442:27)
    at runMicrotasks (<anonymous>)
    at processTicksAndRejections (node:internal/process/task_queues:96:5)
    at Object.apply (wrap_function.js:73:16) {
  actual: '{\n' +
    '  "action_connectors_errors": []\n' +
    '  "action_connectors_success": true\n' +
    '  "action_connectors_success_count": 0\n' +
    '  "action_connectors_warnings": []\n' +
    '  "errors": [\n' +
    '    {\n' +
    '      "error": {\n' +
    '        "message": "Unauthorized to create a \\"siem.queryRule\\" rule for \\"siem\\""\n' +
    '        "status_code": 400\n' +
    '      }\n' +
    '      "rule_id": "rule-1"\n' +
    '    }\n' +
    '  ]\n' +
    '  "exceptions_errors": []\n' +
    '  "exceptions_success": true\n' +
    '  "exceptions_success_count": 1\n' +
    '  "rules_count": 1\n' +
    '  "success": false\n' +
    '  "success_count": 0\n' +
    '}',
  expected: '{\n' +
    '  "action_connectors_errors": []\n' +
    '  "action_connectors_success": true\n' +
    '  "action_connectors_success_count": 0\n' +
    '  "action_connectors_warnings": []\n' +
    '  "errors": []\n' +
    '  "exceptions_errors": []\n' +
    '  "exceptions_success": true\n' +
    '  "exceptions_success_count": 1\n' +
    '  "rules_count": 1\n' +
    '  "success": true\n' +
    '  "success_count": 1\n' +
    '}',
  showDiff: true
}

First failure: CI Build - 8.8

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[elasticmachine]

Pinging @elastic/security-detections-response (Team:Detections and Resp)

[WafaaNasr]

After successfully running this test through the Flaky Test Runner for 100 iterations without any failures, it has been determined that the test is not truly flaky or failing. As a result, the ticket can be closed.