diff --git a/x-pack/plugins/security_solution/public/management/cypress/e2e/automated_response_actions/automated_response_actions.cy.ts b/x-pack/plugins/security_solution/public/management/cypress/e2e/automated_response_actions/automated_response_actions.cy.ts
index 3ce4dab44925a..a7a23ed777583 100644
--- a/x-pack/plugins/security_solution/public/management/cypress/e2e/automated_response_actions/automated_response_actions.cy.ts
+++ b/x-pack/plugins/security_solution/public/management/cypress/e2e/automated_response_actions/automated_response_actions.cy.ts
@@ -100,7 +100,7 @@ describe.skip(
         visitRuleAlerts(ruleName);
         closeAllToasts();
 
-        changeAlertsFilter('process.name: "sshd"');
+        changeAlertsFilter('process.name: "agentbeat"');
         cy.getByTestSubj('expand-event').eq(0).click();
         cy.getByTestSubj('securitySolutionFlyoutNavigationExpandDetailButton').click();
         cy.getByTestSubj('securitySolutionFlyoutResponseTab').click();