[Serverless security] [ti_opencti] Failing test daily: pipeline test: test-domain-name-with-external-reference.json in ti_opencti.indicator

[elastic-vault-github-plugin-prod]

• Serverless: security
• Package: ti_opencti
• Failing test: pipeline test: test-domain-name-with-external-reference.json
• DataStream: indicator
• Owners:
  • @elastic/security-service-integrations

Failure:

test case failed: one or more problems with fields found in documents: [0] unexpected pipeline error: [Processor "script" with tag "" in pipeline "ecs_from_domain_name_or_hostname-1764307361493215756" failed with message "cannot access method/field [add] from a null def reference"
]

First build failed: https://buildkite.com/elastic/integrations-serverless/builds/1536

Latest failed builds:

• https://buildkite.com/elastic/integrations-serverless/builds/1546
• https://buildkite.com/elastic/integrations-serverless/builds/1548
• https://buildkite.com/elastic/integrations-serverless/builds/1553

[mohitjha-elastic]

The PR related to the fix has been merged.
PR ref - #16129