[Stack 9.0.0-SNAPSHOT] [snyk] Failing test daily: system test: default in snyk.audit_logs

[mrodm]

• Stack version: 9.0.0-SNAPSHOT
• Package: snyk
• Failing test: system test: default
• DataStream: audit_logs
• Owners:
  • @elastic/security-service-integrations

Failure:

Error: error running package system tests: could not complete test run: failed to search docs for data stream logs-snyk.audit_logs-42535: [400 Bad Request] {"error":{"root_cause":[{"type":"x_content_parse_exception","reason":"[1:1522] Duplicate field 'notSupported'\n at [Source: (byte[])\"{\"@timestamp\":\"2024-05-15T16:52:32.000Z\",\"agent\":{\"ephemeral_id\":\"71c9cde9-1f6d-4e2a-a210-e873a97b2b51\",\"id\":\"802bdde9-479c-4220-862a-6f689eda3535\",\"name\":\"elastic-agent-16661\",\"type\":\"filebeat\",\"version\":\"9.0.0\"},\"cloud\":{\"account\":{\"id\":\"elastic-ci-prod\"},\"availability_zone\":\"us-central1-f\",\"instance\":{\"id\":\"4046521454124039992\",\"name\":\"bk-agent-prod-gcp-1738719702849294140\"},\"machine\":{\"type\":\"n1-standard-4\"},\"project\":{\"id\":\"elastic-ci-prod\"},\"provider\":\"gcp\",\"region\":\"us-central1\",\"service\"\"[truncated 1319 bytes]; line: 1, column: 1522]"}],"type":"search_phase_execution_exception","reason":"all shards failed","phase":"query","grouped":true,"failed_shards":[{"shard":0,"index":".ds-logs-snyk.audit_logs-42535-2025.02.05-000001","node":"RyQwFsznRoCmqwN30zsflA","reason":{"type":"x_content_parse_exception","reason":"[1:1522] Duplicate field 'notSupported'\n at [Source: (byte[])\"{\"@timestamp\":\"2024-05-15T16:52:32.000Z\",\"agent\":{\"ephemeral_id\":\"71c9cde9-1f6d-4e2a-a210-e873a97b2b51\",\"id\":\"802bdde9-479c-4220-862a-6f689eda3535\",\"name\":\"elastic-agent-16661\",\"type\":\"filebeat\",\"version\":\"9.0.0\"},\"cloud\":{\"account\":{\"id\":\"elastic-ci-prod\"},\"availability_zone\":\"us-central1-f\",\"instance\":{\"id\":\"4046521454124039992\",\"name\":\"bk-agent-prod-gcp-1738719702849294140\"},\"machine\":{\"type\":\"n1-standard-4\"},\"project\":{\"id\":\"elastic-ci-prod\"},\"provider\":\"gcp\",\"region\":\"us-central1\",\"service\"\"[truncated 1319 bytes]; line: 1, column: 1522]","caused_by":{"type":"json_parse_exception","reason":"Duplicate field 'notSupported'\n at [Source: (byte[])\"{\"@timestamp\":\"2024-05-15T16:52:32.000Z\",\"agent\":{\"ephemeral_id\":\"71c9cde9-1f6d-4e2a-a210-e873a97b2b51\",\"id\":\"802bdde9-479c-4220-862a-6f689eda3535\",\"name\":\"elastic-agent-16661\",\"type\":\"filebeat\",\"version\":\"9.0.0\"},\"cloud\":{\"account\":{\"id\":\"elastic-ci-prod\"},\"availability_zone\":\"us-central1-f\",\"instance\":{\"id\":\"4046521454124039992\",\"name\":\"bk-agent-prod-gcp-1738719702849294140\"},\"machine\":{\"type\":\"n1-standard-4\"},\"project\":{\"id\":\"elastic-ci-prod\"},\"provider\":\"gcp\",\"region\":\"us-central1\",\"service\"\"[truncated 1319 bytes]; line: 1, column: 1522]"}}}],"caused_by":{"type":"x_content_parse_exception","reason":"[1:1522] Duplicate field 'notSupported'\n at [Source: (byte[])\"{\"@timestamp\":\"2024-05-15T16:52:32.000Z\",\"agent\":{\"ephemeral_id\":\"71c9cde9-1f6d-4e2a-a210-e873a97b2b51\",\"id\":\"802bdde9-479c-4220-862a-6f689eda3535\",\"name\":\"elastic-agent-16661\",\"type\":\"filebeat\",\"version\":\"9.0.0\"},\"cloud\":{\"account\":{\"id\":\"elastic-ci-prod\"},\"availability_zone\":\"us-central1-f\",\"instance\":{\"id\":\"4046521454124039992\",\"name\":\"bk-agent-prod-gcp-1738719702849294140\"},\"machine\":{\"type\":\"n1-standard-4\"},\"project\":{\"id\":\"elastic-ci-prod\"},\"provider\":\"gcp\",\"region\":\"us-central1\",\"service\"\"[truncated 1319 bytes]; line: 1, column: 1522]","caused_by":{"type":"x_content_parse_exception","reason":"[1:1522] Duplicate field 'notSupported'\n at [Source: (byte[])\"{\"@timestamp\":\"2024-05-15T16:52:32.000Z\",\"agent\":{\"ephemeral_id\":\"71c9cde9-1f6d-4e2a-a210-e873a97b2b51\",\"id\":\"802bdde9-479c-4220-862a-6f689eda3535\",\"name\":\"elastic-agent-16661\",\"type\":\"filebeat\",\"version\":\"9.0.0\"},\"cloud\":{\"account\":{\"id\":\"elastic-ci-prod\"},\"availability_zone\":\"us-central1-f\",\"instance\":{\"id\":\"4046521454124039992\",\"name\":\"bk-agent-prod-gcp-1738719702849294140\"},\"machine\":{\"type\":\"n1-standard-4\"},\"project\":{\"id\":\"elastic-ci-prod\"},\"provider\":\"gcp\",\"region\":\"us-central1\",\"service\"\"[truncated 1319 bytes]; line: 1, column: 1522]","caused_by":{"type":"json_parse_exception","reason":"Duplicate field 'notSupported'\n at [Source: (byte[])\"{\"@timestamp\":\"2024-05-15T16:52:32.000Z\",\"agent\":{\"ephemeral_id\":\"71c9cde9-1f6d-4e2a-a210-e873a97b2b51\",\"id\":\"802bdde9-479c-4220-862a-6f689eda3535\",\"name\":\"elastic-agent-16661\",\"type\":\"filebeat\",\"version\":\"9.0.0\"},\"cloud\":{\"account\":{\"id\":\"elastic-ci-prod\"},\"availability_zone\":\"us-central1-f\",\"instance\":{\"id\":\"4046521454124039992\",\"name\":\"bk-agent-prod-gcp-1738719702849294140\"},\"machine\":{\"type\":\"n1-standard-4\"},\"project\":{\"id\":\"elastic-ci-prod\"},\"provider\":\"gcp\",\"region\":\"us-central1\",\"service\"\"[truncated 1319 bytes]; line: 1, column: 1522]"}}}},"status":400}

Buildkite build failed: https://buildkite.com/elastic/integrations/builds/21700

[mrodm]

This package is still failing in the latest builds of the daily CI job for 9.0.0-SNAPSHOT with the same error.

Link to the Buildkite build:

https://buildkite.com/elastic/integrations/builds/22073#0194f2aa-6381-4fe9-a1d4-0e97d0a0ab90/626-1092