From f5dc24d1969f80e4aa3ced7cc375dd00554f8c0c Mon Sep 17 00:00:00 2001
From: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
Date: Mon, 6 May 2024 10:13:20 -0400
Subject: [PATCH] [8.13] [Security Solution][Endpoint] Re-enable tests for
 automated response actions from alerts (#182102) (#182660)

# Backport

> [!WARNING]
> merge after elastic/kibana/pull/182663

This will backport the following commits from `main` to `8.13`:
- [[Security Solution][Endpoint] Re-enable tests for automated response
actions from alerts
(#182102)](https://github.com/elastic/kibana/pull/182102)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT
[{"author":{"name":"Ash","email":"1849116+ashokaditya@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-05-06T11:12:51Z","message":"[Security
Solution][Endpoint] Re-enable tests for automated response actions from
alerts (#182102)\n\n## Summary\r\n\r\nRe-enable skipped test for
automated response actions from alerts.\r\ncloses
elastic/kibana/issues/169828\r\n\r\n#### Flaky
runner\r\n-\r\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/5809\r\nx
50 (1
fail)\r\n-\r\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/5851\r\nx
50 (all pass)\r\n\r\n### Checklist\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] [Flaky
Test\r\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\r\nused on any tests
changed","sha":"8096baf940927ec7d58e1773f602bfafbaaff6c4","branchLabelMapping":{"^v8.15.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Defend
Workflows","OLM
Sprint","v8.14.0","v8.13.2","v8.15.0"],"title":"[Security
Solution][Endpoint] Re-enable tests for automated response actions from
alerts","number":182102,"url":"https://github.com/elastic/kibana/pull/182102","mergeCommit":{"message":"[Security
Solution][Endpoint] Re-enable tests for automated response actions from
alerts (#182102)\n\n## Summary\r\n\r\nRe-enable skipped test for
automated response actions from alerts.\r\ncloses
elastic/kibana/issues/169828\r\n\r\n#### Flaky
runner\r\n-\r\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/5809\r\nx
50 (1
fail)\r\n-\r\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/5851\r\nx
50 (all pass)\r\n\r\n### Checklist\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] [Flaky
Test\r\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\r\nused on any tests
changed","sha":"8096baf940927ec7d58e1773f602bfafbaaff6c4"}},"sourceBranch":"main","suggestedTargetBranches":["8.14","8.13"],"targetPullRequestStates":[{"branch":"8.14","label":"v8.14.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.13","label":"v8.13.2","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.15.0","branchLabelMappingKey":"^v8.15.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/182102","number":182102,"mergeCommit":{"message":"[Security
Solution][Endpoint] Re-enable tests for automated response actions from
alerts (#182102)\n\n## Summary\r\n\r\nRe-enable skipped test for
automated response actions from alerts.\r\ncloses
elastic/kibana/issues/169828\r\n\r\n#### Flaky
runner\r\n-\r\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/5809\r\nx
50 (1
fail)\r\n-\r\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/5851\r\nx
50 (all pass)\r\n\r\n### Checklist\r\n\r\n- [x] [Unit or
functional\r\ntests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)\r\nwere
updated or added to match the most common scenarios\r\n- [x] [Flaky
Test\r\nRunner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1)
was\r\nused on any tests
changed","sha":"8096baf940927ec7d58e1773f602bfafbaaff6c4"}}]}]
BACKPORT-->

---------

Co-authored-by: Ash <1849116+ashokaditya@users.noreply.github.com>
---
 .../automated_response_actions/automated_response_actions.cy.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/x-pack/plugins/security_solution/public/management/cypress/e2e/automated_response_actions/automated_response_actions.cy.ts b/x-pack/plugins/security_solution/public/management/cypress/e2e/automated_response_actions/automated_response_actions.cy.ts
index 3ce4dab44925a..a7a23ed777583 100644
--- a/x-pack/plugins/security_solution/public/management/cypress/e2e/automated_response_actions/automated_response_actions.cy.ts
+++ b/x-pack/plugins/security_solution/public/management/cypress/e2e/automated_response_actions/automated_response_actions.cy.ts
@@ -100,7 +100,7 @@ describe.skip(
         visitRuleAlerts(ruleName);
         closeAllToasts();
 
-        changeAlertsFilter('process.name: "sshd"');
+        changeAlertsFilter('process.name: "agentbeat"');
         cy.getByTestSubj('expand-event').eq(0).click();
         cy.getByTestSubj('securitySolutionFlyoutNavigationExpandDetailButton').click();
         cy.getByTestSubj('securitySolutionFlyoutResponseTab').click();