Revert query test change

elastic · Sep 26, 2023 · 645e1e6 · 645e1e6
1 parent f3407f1
commit 645e1e6
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/...k/test/detection_engine_api_integration/security_and_spaces/rule_execution_logic/query.ts b/...k/test/detection_engine_api_integration/security_and_spaces/rule_execution_logic/query.ts
@@ -786,8 +786,7 @@ export default ({ getService }: FtrProviderContext) => {
               name: 'agent-1',
             },
           };
-          // Add a new document, then disable and re-enable to trigger another rule run. The existing docs
-          // should be marked as untracked, and a new rule run should begin. The second doc of the new run should
+          // Add a new document, then disable and re-enable to trigger another rule run. The second doc should
           // trigger an update to the existing alert without changing the timestamp
           await indexListOfDocuments([secondDocument, secondDocument]);
           await patchRule(supertest, log, { id: createdRule.id, enabled: false });
@@ -815,7 +814,7 @@ export default ({ getService }: FtrProviderContext) => {
             [ALERT_ORIGINAL_TIME]: firstTimestamp,
             [ALERT_SUPPRESSION_START]: firstTimestamp,
             [ALERT_SUPPRESSION_END]: secondTimestamp,
-            [ALERT_SUPPRESSION_DOCS_COUNT]: 5,
+            [ALERT_SUPPRESSION_DOCS_COUNT]: 3,
           });
         });