[auditbeat] Flaky: "created", "updated" does not contain "attributes_modified"

[mtojek]

Flaky Test

• Test Name: auditbeat/module/file_integrity TestActions
• Link: link
• Branch: master
• CI runs: https://github.com/elastic/beats/runs/4882805048?check_suite_focus=true https://github.com/elastic/beats/runs/4885891319?check_suite_focus=true

Stack Trace

    metricset_test.go:169: 
        	Error Trace:	metricset_test.go:169
        	Error:      	[]string{"created", "updated"} does not contain "attributes_modified"
        	Test:       	TestActions

[elasticmachine]

Pinging @elastic/siem (Team:SIEM)

[mtojek]

It looks like @ChrsMark tried to solve this one before: #23965

[elasticmachine]

Pinging @elastic/sec-linux-platform (Team:Security-Linux Platform)