[truncated]
and system indices\"\nOrigin:kibana\nQuery:\n200 - 87.0B\nPUT /.siem-signals-default-000001\n{\"aliases\":{\".siem-signals-default\":{\"is_write_index\":true}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:40:57.417+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"Legacy index templates are deprecated in favor of composable templates.\"\nOrigin:kibana\nQuery:\n200 - 21.0B\nPUT /_template/.lists-default\n{\"index_patterns\":[\".lists-default-*\"],\"mappings\":{\"dynamic\":\"strict\",\"properties\":{\"name\":{\"type\":\"keyword\"},\"deserializer\":{\"type\":\"keyword\"},\"serializer\":{\"type\":\"keyword\"},\"description\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"},\"tie_breaker_id\":{\"type\":\"keyword\"},\"meta\":{\"enabled\":\"false\",\"type\":\"object\"},\"created_at\":{\"type\":\"date\"},\"updated_at\":{\"type\":\"date\"},\"created_by\":{\"type\":\"keyword\"},\"updated_by\":{\"type\":\"keyword\"},\"version\":{\"type\":\"keyword\"},\"immutable\":{\"type\":\"boolean\"}}},\"settings\":{\"index\":{\"lifecycle\":{\"name\":\".lists-default\",\"rollover_alias\":\".lists-default\"}}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:40:57.440+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"Legacy index templates are deprecated in favor of composable templates.\"\nOrigin:kibana\nQuery:\n200 - 21.0B\nPUT /_template/.items-default\n{\"index_patterns\":[\".items-default-*\"],\"mappings\":{\"dynamic\":\"strict\",\"properties\":{\"tie_breaker_id\":{\"type\":\"keyword\"},\"list_id\":{\"type\":\"keyword\"},\"deserializer\":{\"type\":\"keyword\"},\"serializer\":{\"type\":\"keyword\"},\"meta\":{\"enabled\":\"false\",\"type\":\"object\"},\"created_at\":{\"type\":\"date\"},\"updated_at\":{\"type\":\"date\"},\"created_by\":{\"type\":\"keyword\"},\"updated_by\":{\"type\":\"keyword\"},\"ip\":{\"type\":\"ip\"},\"long\":{\"type\":\"long\"},\"integer\":{\"type\":\"integer\"},\"short\":{\"type\":\"short\"},\"byte\":{\"type\":\"byte\"},\"double\":{\"type\":\"double\"},\"float\":{\"type\":\"float\"},\"half_float\":{\"type\":\"half_float\"},\"date\":{\"type\":\"date\"},\"date_nanos\":{\"type\":\"date_nanos\"},\"boolean\":{\"type\":\"boolean\"},\"binary\":{\"type\":\"binary\"},\"integer_range\":{\"type\":\"integer_range\"},\"float_range\":{\"type\":\"float_range\"},\"long_range\":{\"type\":\"long_range\"},\"double_range\":{\"type\":\"double_range\"},\"date_range\":{\"type\":\"date_range\"},\"ip_range\":{\"type\":\"ip_range\"},\"geo_point\":{\"type\":\"geo_point\"},\"geo_shape\":{\"type\":\"geo_shape\"},\"keyword\":{\"type\":\"keyword\"},\"text\":{\"type\":\"text\"},\"shape\":{\"type\":\"shape\"}}},\"settings\":{\"index\":{\"lifecycle\":{\"name\":\".items-default\",\"rollover_alias\":\".items-default\"}}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:40:57.513+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"index name [.lists-default-000001] starts with a dot '.', in the next major version, index names starting with a dot are reserved for hidden indices and system indices\"\nOrigin:kibana\nQuery:\n200 - 80.0B\nPUT /.lists-default-000001\n{\"aliases\":{\".lists-default\":{\"is_write_index\":true}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:40:57.568+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"index name [.items-default-000001] starts with a dot '.', in the next major version, index names starting with a dot are reserved for hidden indices and system indices\"\nOrigin:kibana\nQuery:\n200 - 80.0B\nPUT /.items-default-000001\n{\"aliases\":{\".items-default\":{\"is_write_index\":true}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
Did not get an expected 200 "ok" when waiting for a list item (waitForListItem) yet. Retrying until we get a 200 "ok". body: {"message":"list_id: \"list_items.txt\" item of word one does not exist","status_code":404}, status: 404
Try number 0 out of 3200 for function waitForListItem fileName: "list_items.txt" itemValue: "word one"
Did not get an expected 200 "ok" when waiting for a list item (waitForListItem) yet. Retrying until we get a 200 "ok". body: {"message":"list_id: \"list_items.txt\" item of word five does not exist","status_code":404}, status: 404
Try number 0 out of 3200 for function waitForListItem fileName: "list_items.txt" itemValue: "word five"
Did not get an expected 200 "ok" when waiting for a list item (waitForListItem) yet. Retrying until we get a 200 "ok". body: {"message":"list_id: \"list_items.txt\" item of word eight does not exist","status_code":404}, status: 404
Try number 0 out of 3200 for function waitForListItem fileName: "list_items.txt" itemValue: "word eight"
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 06111150-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 0 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 06111150-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 1 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 06111150-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 2 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 06111150-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 3 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 06111150-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"06111150-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:04.747Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 4 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 06111150-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"06111150-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:04.747Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 5 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 06111150-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"06111150-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:04.747Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 6 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 06111150-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"06111150-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:04.747Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 7 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 06111150-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"06111150-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:05.108Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 8 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 06111150-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"06111150-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:05.108Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 9 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 06111150-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"06111150-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:05.108Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 10 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 06111150-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"06111150-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:05.108Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 11 out of 3200 for function waitForRuleSuccessOrStatus
                   └- ✓ pass  (10.0s)
                 └-> "after each" hook for "will return only the empty array for results if we have a list that includes all text"
                 └-> "after all" hook: afterTestSuite.trigger for "will return only the empty array for results if we have a list that includes all text"
               └-: "is not in list" operator
                 └-> "before all" hook: beforeTestSuite.trigger for "will return 1 result if we have a list that excludes 1 text"
                 └-> will return 1 result if we have a list that excludes 1 text
                   └-> "before each" hook: global before each for "will return 1 result if we have a list that excludes 1 text"
                   └-> "before each" hook for "will return 1 result if we have a list that excludes 1 text"
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:41:12.451+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"index name [.siem-signals-default-000001] starts with a dot '.', in the next major version, index names starting with a dot are reserved for hidden indices and system indices\"\nOrigin:kibana\nQuery:\n200 - 87.0B\nPUT /.siem-signals-default-000001\n{\"aliases\":{\".siem-signals-default\":{\"is_write_index\":true}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:41:12.544+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"Legacy index templates are deprecated in favor of composable templates.\"\nOrigin:kibana\nQuery:\n200 - 21.0B\nPUT /_template/.lists-default\n{\"index_patterns\":[\".lists-default-*\"],\"mappings\":{\"dynamic\":\"strict\",\"properties\":{\"name\":{\"type\":\"keyword\"},\"deserializer\":{\"type\":\"keyword\"},\"serializer\":{\"type\":\"keyword\"},\"description\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"},\"tie_breaker_id\":{\"type\":\"keyword\"},\"meta\":{\"enabled\":\"false\",\"type\":\"object\"},\"created_at\":{\"type\":\"date\"},\"updated_at\":{\"type\":\"date\"},\"created_by\":{\"type\":\"keyword\"},\"updated_by\":{\"type\":\"keyword\"},\"version\":{\"type\":\"keyword\"},\"immutable\":{\"type\":\"boolean\"}}},\"settings\":{\"index\":{\"lifecycle\":{\"name\":\".lists-default\",\"rollover_alias\":\".lists-default\"}}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:41:12.567+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"Legacy index templates are deprecated in favor of composable templates.\"\nOrigin:kibana\nQuery:\n200 - 21.0B\nPUT /_template/.items-default\n{\"index_patterns\":[\".items-default-*\"],\"mappings\":{\"dynamic\":\"strict\",\"properties\":{\"tie_breaker_id\":{\"type\":\"keyword\"},\"list_id\":{\"type\":\"keyword\"},\"deserializer\":{\"type\":\"keyword\"},\"serializer\":{\"type\":\"keyword\"},\"meta\":{\"enabled\":\"false\",\"type\":\"object\"},\"created_at\":{\"type\":\"date\"},\"updated_at\":{\"type\":\"date\"},\"created_by\":{\"type\":\"keyword\"},\"updated_by\":{\"type\":\"keyword\"},\"ip\":{\"type\":\"ip\"},\"long\":{\"type\":\"long\"},\"integer\":{\"type\":\"integer\"},\"short\":{\"type\":\"short\"},\"byte\":{\"type\":\"byte\"},\"double\":{\"type\":\"double\"},\"float\":{\"type\":\"float\"},\"half_float\":{\"type\":\"half_float\"},\"date\":{\"type\":\"date\"},\"date_nanos\":{\"type\":\"date_nanos\"},\"boolean\":{\"type\":\"boolean\"},\"binary\":{\"type\":\"binary\"},\"integer_range\":{\"type\":\"integer_range\"},\"float_range\":{\"type\":\"float_range\"},\"long_range\":{\"type\":\"long_range\"},\"double_range\":{\"type\":\"double_range\"},\"date_range\":{\"type\":\"date_range\"},\"ip_range\":{\"type\":\"ip_range\"},\"geo_point\":{\"type\":\"geo_point\"},\"geo_shape\":{\"type\":\"geo_shape\"},\"keyword\":{\"type\":\"keyword\"},\"text\":{\"type\":\"text\"},\"shape\":{\"type\":\"shape\"}}},\"settings\":{\"index\":{\"lifecycle\":{\"name\":\".items-default\",\"rollover_alias\":\".items-default\"}}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:41:12.624+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"index name [.lists-default-000001] starts with a dot '.', in the next major version, index names starting with a dot are reserved for hidden indices and system indices\"\nOrigin:kibana\nQuery:\n200 - 80.0B\nPUT /.lists-default-000001\n{\"aliases\":{\".lists-default\":{\"is_write_index\":true}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:41:12.683+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"index name [.items-default-000001] starts with a dot '.', in the next major version, index names starting with a dot are reserved for hidden indices and system indices\"\nOrigin:kibana\nQuery:\n200 - 80.0B\nPUT /.items-default-000001\n{\"aliases\":{\".items-default\":{\"is_write_index\":true}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
Did not get an expected 200 "ok" when waiting for a list item (waitForListItem) yet. Retrying until we get a 200 "ok". body: {"message":"list_id: \"list_items.txt\" item of word one does not exist","status_code":404}, status: 404
Try number 0 out of 3200 for function waitForListItem fileName: "list_items.txt" itemValue: "word one"
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 0f117330-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 0 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 0f117330-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 1 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 0f117330-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 2 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 0f117330-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 3 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 0f117330-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"0f117330-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:19.749Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 4 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 0f117330-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"0f117330-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:19.749Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 5 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 0f117330-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"0f117330-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:19.749Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 6 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 0f117330-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"0f117330-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:19.749Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 7 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 0f117330-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"0f117330-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:20.222Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 8 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 0f117330-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"0f117330-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:20.222Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 9 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 0f117330-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"0f117330-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:20.222Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 10 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 0f117330-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"0f117330-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:20.222Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 11 out of 3200 for function waitForRuleSuccessOrStatus
                   └- ✓ pass  (10.3s)
                 └-> "after each" hook for "will return 1 result if we have a list that excludes 1 text"
                 └-> will return 1 result if we have a list that excludes 1 text but repeat 2 elements from the array in the list
                   └-> "before each" hook: global before each for "will return 1 result if we have a list that excludes 1 text but repeat 2 elements from the array in the list"
                   └-> "before each" hook for "will return 1 result if we have a list that excludes 1 text but repeat 2 elements from the array in the list"
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:41:27.577+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"index name [.siem-signals-default-000001] starts with a dot '.', in the next major version, index names starting with a dot are reserved for hidden indices and system indices\"\nOrigin:kibana\nQuery:\n200 - 87.0B\nPUT /.siem-signals-default-000001\n{\"aliases\":{\".siem-signals-default\":{\"is_write_index\":true}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:41:27.649+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"Legacy index templates are deprecated in favor of composable templates.\"\nOrigin:kibana\nQuery:\n200 - 21.0B\nPUT /_template/.lists-default\n{\"index_patterns\":[\".lists-default-*\"],\"mappings\":{\"dynamic\":\"strict\",\"properties\":{\"name\":{\"type\":\"keyword\"},\"deserializer\":{\"type\":\"keyword\"},\"serializer\":{\"type\":\"keyword\"},\"description\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"},\"tie_breaker_id\":{\"type\":\"keyword\"},\"meta\":{\"enabled\":\"false\",\"type\":\"object\"},\"created_at\":{\"type\":\"date\"},\"updated_at\":{\"type\":\"date\"},\"created_by\":{\"type\":\"keyword\"},\"updated_by\":{\"type\":\"keyword\"},\"version\":{\"type\":\"keyword\"},\"immutable\":{\"type\":\"boolean\"}}},\"settings\":{\"index\":{\"lifecycle\":{\"name\":\".lists-default\",\"rollover_alias\":\".lists-default\"}}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:41:27.690+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"Legacy index templates are deprecated in favor of composable templates.\"\nOrigin:kibana\nQuery:\n200 - 21.0B\nPUT /_template/.items-default\n{\"index_patterns\":[\".items-default-*\"],\"mappings\":{\"dynamic\":\"strict\",\"properties\":{\"tie_breaker_id\":{\"type\":\"keyword\"},\"list_id\":{\"type\":\"keyword\"},\"deserializer\":{\"type\":\"keyword\"},\"serializer\":{\"type\":\"keyword\"},\"meta\":{\"enabled\":\"false\",\"type\":\"object\"},\"created_at\":{\"type\":\"date\"},\"updated_at\":{\"type\":\"date\"},\"created_by\":{\"type\":\"keyword\"},\"updated_by\":{\"type\":\"keyword\"},\"ip\":{\"type\":\"ip\"},\"long\":{\"type\":\"long\"},\"integer\":{\"type\":\"integer\"},\"short\":{\"type\":\"short\"},\"byte\":{\"type\":\"byte\"},\"double\":{\"type\":\"double\"},\"float\":{\"type\":\"float\"},\"half_float\":{\"type\":\"half_float\"},\"date\":{\"type\":\"date\"},\"date_nanos\":{\"type\":\"date_nanos\"},\"boolean\":{\"type\":\"boolean\"},\"binary\":{\"type\":\"binary\"},\"integer_range\":{\"type\":\"integer_range\"},\"float_range\":{\"type\":\"float_range\"},\"long_range\":{\"type\":\"long_range\"},\"double_range\":{\"type\":\"double_range\"},\"date_range\":{\"type\":\"date_range\"},\"ip_range\":{\"type\":\"ip_range\"},\"geo_point\":{\"type\":\"geo_point\"},\"geo_shape\":{\"type\":\"geo_shape\"},\"keyword\":{\"type\":\"keyword\"},\"text\":{\"type\":\"text\"},\"shape\":{\"type\":\"shape\"}}},\"settings\":{\"index\":{\"lifecycle\":{\"name\":\".items-default\",\"rollover_alias\":\".items-default\"}}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:41:27.757+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"index name [.lists-default-000001] starts with a dot '.', in the next major version, index names starting with a dot are reserved for hidden indices and system indices\"\nOrigin:kibana\nQuery:\n200 - 80.0B\nPUT /.lists-default-000001\n{\"aliases\":{\".lists-default\":{\"is_write_index\":true}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:41:27.834+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"index name [.items-default-000001] starts with a dot '.', in the next major version, index names starting with a dot are reserved for hidden indices and system indices\"\nOrigin:kibana\nQuery:\n200 - 80.0B\nPUT /.items-default-000001\n{\"aliases\":{\".items-default\":{\"is_write_index\":true}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
Did not get an expected 200 "ok" when waiting for a list item (waitForListItem) yet. Retrying until we get a 200 "ok". body: {"message":"list_id: \"list_items.txt\" item of word one does not exist","status_code":404}, status: 404
Try number 0 out of 3200 for function waitForListItem fileName: "list_items.txt" itemValue: "word one"
Did not get an expected 200 "ok" when waiting for a list item (waitForListItem) yet. Retrying until we get a 200 "ok". body: {"message":"list_id: \"list_items.txt\" item of word two does not exist","status_code":404}, status: 404
Try number 0 out of 3200 for function waitForListItem fileName: "list_items.txt" itemValue: "word two"
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 0 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 1 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 2 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 3 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 4 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 5 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 6 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 7 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 8 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 9 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 10 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 11 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"18ac8e70-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:37.763Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 12 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"18ac8e70-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:37.763Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 13 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"18ac8e70-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:37.763Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 14 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"18ac8e70-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:37.763Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 15 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"18ac8e70-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:38.328Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 16 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"18ac8e70-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:38.328Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 17 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 18ac8e70-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"18ac8e70-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:38.328Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 18 out of 3200 for function waitForRuleSuccessOrStatus
                   └- ✓ pass  (13.1s)
                 └-> "after each" hook for "will return 1 result if we have a list that excludes 1 text but repeat 2 elements from the array in the list"
                 └-> will return 2 results if we have a list that excludes 2 text
                   └-> "before each" hook: global before each for "will return 2 results if we have a list that excludes 2 text"
                   └-> "before each" hook for "will return 2 results if we have a list that excludes 2 text"
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:41:45.671+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"index name [.siem-signals-default-000001] starts with a dot '.', in the next major version, index names starting with a dot are reserved for hidden indices and system indices\"\nOrigin:kibana\nQuery:\n200 - 87.0B\nPUT /.siem-signals-default-000001\n{\"aliases\":{\".siem-signals-default\":{\"is_write_index\":true}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:41:45.764+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"Legacy index templates are deprecated in favor of composable templates.\"\nOrigin:kibana\nQuery:\n200 - 21.0B\nPUT /_template/.lists-default\n{\"index_patterns\":[\".lists-default-*\"],\"mappings\":{\"dynamic\":\"strict\",\"properties\":{\"name\":{\"type\":\"keyword\"},\"deserializer\":{\"type\":\"keyword\"},\"serializer\":{\"type\":\"keyword\"},\"description\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"},\"tie_breaker_id\":{\"type\":\"keyword\"},\"meta\":{\"enabled\":\"false\",\"type\":\"object\"},\"created_at\":{\"type\":\"date\"},\"updated_at\":{\"type\":\"date\"},\"created_by\":{\"type\":\"keyword\"},\"updated_by\":{\"type\":\"keyword\"},\"version\":{\"type\":\"keyword\"},\"immutable\":{\"type\":\"boolean\"}}},\"settings\":{\"index\":{\"lifecycle\":{\"name\":\".lists-default\",\"rollover_alias\":\".lists-default\"}}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:41:45.787+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"Legacy index templates are deprecated in favor of composable templates.\"\nOrigin:kibana\nQuery:\n200 - 21.0B\nPUT /_template/.items-default\n{\"index_patterns\":[\".items-default-*\"],\"mappings\":{\"dynamic\":\"strict\",\"properties\":{\"tie_breaker_id\":{\"type\":\"keyword\"},\"list_id\":{\"type\":\"keyword\"},\"deserializer\":{\"type\":\"keyword\"},\"serializer\":{\"type\":\"keyword\"},\"meta\":{\"enabled\":\"false\",\"type\":\"object\"},\"created_at\":{\"type\":\"date\"},\"updated_at\":{\"type\":\"date\"},\"created_by\":{\"type\":\"keyword\"},\"updated_by\":{\"type\":\"keyword\"},\"ip\":{\"type\":\"ip\"},\"long\":{\"type\":\"long\"},\"integer\":{\"type\":\"integer\"},\"short\":{\"type\":\"short\"},\"byte\":{\"type\":\"byte\"},\"double\":{\"type\":\"double\"},\"float\":{\"type\":\"float\"},\"half_float\":{\"type\":\"half_float\"},\"date\":{\"type\":\"date\"},\"date_nanos\":{\"type\":\"date_nanos\"},\"boolean\":{\"type\":\"boolean\"},\"binary\":{\"type\":\"binary\"},\"integer_range\":{\"type\":\"integer_range\"},\"float_range\":{\"type\":\"float_range\"},\"long_range\":{\"type\":\"long_range\"},\"double_range\":{\"type\":\"double_range\"},\"date_range\":{\"type\":\"date_range\"},\"ip_range\":{\"type\":\"ip_range\"},\"geo_point\":{\"type\":\"geo_point\"},\"geo_shape\":{\"type\":\"geo_shape\"},\"keyword\":{\"type\":\"keyword\"},\"text\":{\"type\":\"text\"},\"shape\":{\"type\":\"shape\"}}},\"settings\":{\"index\":{\"lifecycle\":{\"name\":\".items-default\",\"rollover_alias\":\".items-default\"}}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:41:45.841+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"index name [.lists-default-000001] starts with a dot '.', in the next major version, index names starting with a dot are reserved for hidden indices and system indices\"\nOrigin:kibana\nQuery:\n200 - 80.0B\nPUT /.lists-default-000001\n{\"aliases\":{\".lists-default\":{\"is_write_index\":true}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:41:45.900+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"index name [.items-default-000001] starts with a dot '.', in the next major version, index names starting with a dot are reserved for hidden indices and system indices\"\nOrigin:kibana\nQuery:\n200 - 80.0B\nPUT /.items-default-000001\n{\"aliases\":{\".items-default\":{\"is_write_index\":true}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
Did not get an expected 200 "ok" when waiting for a list item (waitForListItem) yet. Retrying until we get a 200 "ok". body: {"message":"list_id: \"list_items.txt\" item of word one does not exist","status_code":404}, status: 404
Try number 0 out of 3200 for function waitForListItem fileName: "list_items.txt" itemValue: "word one"
Did not get an expected 200 "ok" when waiting for a list item (waitForListItem) yet. Retrying until we get a 200 "ok". body: {"message":"list_id: \"list_items.txt\" item of word five does not exist","status_code":404}, status: 404
Try number 0 out of 3200 for function waitForListItem fileName: "list_items.txt" itemValue: "word five"
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 22de9280-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 0 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 22de9280-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 1 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 22de9280-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 2 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 22de9280-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 3 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 22de9280-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"22de9280-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:52.743Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 4 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 22de9280-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"22de9280-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:52.743Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 5 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 22de9280-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"22de9280-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:52.743Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 6 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 22de9280-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"22de9280-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:52.743Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 7 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 22de9280-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"22de9280-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:53.430Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 8 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 22de9280-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"22de9280-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:53.430Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 9 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 22de9280-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"22de9280-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:53.430Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 10 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 22de9280-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"22de9280-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:41:53.430Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 11 out of 3200 for function waitForRuleSuccessOrStatus
                   └- ✓ pass  (10.3s)
                 └-> "after each" hook for "will return 2 results if we have a list that excludes 2 text"
                 └-> will return 3 results if we have a list that excludes 3 items
                   └-> "before each" hook: global before each for "will return 3 results if we have a list that excludes 3 items"
                   └-> "before each" hook for "will return 3 results if we have a list that excludes 3 items"
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:42:00.765+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"index name [.siem-signals-default-000001] starts with a dot '.', in the next major version, index names starting with a dot are reserved for hidden indices and system indices\"\nOrigin:kibana\nQuery:\n200 - 87.0B\nPUT /.siem-signals-default-000001\n{\"aliases\":{\".siem-signals-default\":{\"is_write_index\":true}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:42:00.837+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"Legacy index templates are deprecated in favor of composable templates.\"\nOrigin:kibana\nQuery:\n200 - 21.0B\nPUT /_template/.lists-default\n{\"index_patterns\":[\".lists-default-*\"],\"mappings\":{\"dynamic\":\"strict\",\"properties\":{\"name\":{\"type\":\"keyword\"},\"deserializer\":{\"type\":\"keyword\"},\"serializer\":{\"type\":\"keyword\"},\"description\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"},\"tie_breaker_id\":{\"type\":\"keyword\"},\"meta\":{\"enabled\":\"false\",\"type\":\"object\"},\"created_at\":{\"type\":\"date\"},\"updated_at\":{\"type\":\"date\"},\"created_by\":{\"type\":\"keyword\"},\"updated_by\":{\"type\":\"keyword\"},\"version\":{\"type\":\"keyword\"},\"immutable\":{\"type\":\"boolean\"}}},\"settings\":{\"index\":{\"lifecycle\":{\"name\":\".lists-default\",\"rollover_alias\":\".lists-default\"}}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:42:00.859+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"Legacy index templates are deprecated in favor of composable templates.\"\nOrigin:kibana\nQuery:\n200 - 21.0B\nPUT /_template/.items-default\n{\"index_patterns\":[\".items-default-*\"],\"mappings\":{\"dynamic\":\"strict\",\"properties\":{\"tie_breaker_id\":{\"type\":\"keyword\"},\"list_id\":{\"type\":\"keyword\"},\"deserializer\":{\"type\":\"keyword\"},\"serializer\":{\"type\":\"keyword\"},\"meta\":{\"enabled\":\"false\",\"type\":\"object\"},\"created_at\":{\"type\":\"date\"},\"updated_at\":{\"type\":\"date\"},\"created_by\":{\"type\":\"keyword\"},\"updated_by\":{\"type\":\"keyword\"},\"ip\":{\"type\":\"ip\"},\"long\":{\"type\":\"long\"},\"integer\":{\"type\":\"integer\"},\"short\":{\"type\":\"short\"},\"byte\":{\"type\":\"byte\"},\"double\":{\"type\":\"double\"},\"float\":{\"type\":\"float\"},\"half_float\":{\"type\":\"half_float\"},\"date\":{\"type\":\"date\"},\"date_nanos\":{\"type\":\"date_nanos\"},\"boolean\":{\"type\":\"boolean\"},\"binary\":{\"type\":\"binary\"},\"integer_range\":{\"type\":\"integer_range\"},\"float_range\":{\"type\":\"float_range\"},\"long_range\":{\"type\":\"long_range\"},\"double_range\":{\"type\":\"double_range\"},\"date_range\":{\"type\":\"date_range\"},\"ip_range\":{\"type\":\"ip_range\"},\"geo_point\":{\"type\":\"geo_point\"},\"geo_shape\":{\"type\":\"geo_shape\"},\"keyword\":{\"type\":\"keyword\"},\"text\":{\"type\":\"text\"},\"shape\":{\"type\":\"shape\"}}},\"settings\":{\"index\":{\"lifecycle\":{\"name\":\".items-default\",\"rollover_alias\":\".items-default\"}}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:42:00.915+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"index name [.lists-default-000001] starts with a dot '.', in the next major version, index names starting with a dot are reserved for hidden indices and system indices\"\nOrigin:kibana\nQuery:\n200 - 80.0B\nPUT /.lists-default-000001\n{\"aliases\":{\".lists-default\":{\"is_write_index\":true}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
                     │ proc [kibana] {"ecs":{"version":"1.12.0"},"@timestamp":"2024-07-09T16:42:00.989+00:00","message":"Elasticsearch deprecation: 299 Elasticsearch-7.17.23-SNAPSHOT-42b93a534929add031e668becc4565463f2c4b32 \"index name [.items-default-000001] starts with a dot '.', in the next major version, index names starting with a dot are reserved for hidden indices and system indices\"\nOrigin:kibana\nQuery:\n200 - 80.0B\nPUT /.items-default-000001\n{\"aliases\":{\".items-default\":{\"is_write_index\":true}}}","log":{"level":"DEBUG","logger":"elasticsearch.deprecation"},"process":{"pid":4591}}
Did not get an expected 200 "ok" when waiting for a list item (waitForListItem) yet. Retrying until we get a 200 "ok". body: {"message":"list_id: \"list_items.txt\" item of word one does not exist","status_code":404}, status: 404
Try number 0 out of 3200 for function waitForListItem fileName: "list_items.txt" itemValue: "word one"
Did not get an expected 200 "ok" when waiting for a list item (waitForListItem) yet. Retrying until we get a 200 "ok". body: {"message":"list_id: \"list_items.txt\" item of word six does not exist","status_code":404}, status: 404
Try number 0 out of 3200 for function waitForListItem fileName: "list_items.txt" itemValue: "word six"
Did not get an expected 200 "ok" when waiting for a list item (waitForListItem) yet. Retrying until we get a 200 "ok". body: {"message":"list_id: \"list_items.txt\" item of word ten does not exist","status_code":404}, status: 404
Try number 0 out of 3200 for function waitForListItem fileName: "list_items.txt" itemValue: "word ten"
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 2bdf6990-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 0 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 2bdf6990-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 1 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 2bdf6990-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 2 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 2bdf6990-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {}, status: 200
Try number 3 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 2bdf6990-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"2bdf6990-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:42:07.754Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 4 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 2bdf6990-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"2bdf6990-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:42:07.754Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 5 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 2bdf6990-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"2bdf6990-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:42:07.754Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 6 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 2bdf6990-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"2bdf6990-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:42:07.754Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 7 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 2bdf6990-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"2bdf6990-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:42:08.536Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 8 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 2bdf6990-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"2bdf6990-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:42:08.536Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 9 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 2bdf6990-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"2bdf6990-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:42:08.536Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 10 out of 3200 for function waitForRuleSuccessOrStatus
Did not get an expected status of succeeded while waiting for a rule success or status for rule id 2bdf6990-3e12-11ef-8b7c-5f4e128e5491 (waitForRuleSuccessOrStatus). Will continue retrying until status is found. body: {"2bdf6990-3e12-11ef-8b7c-5f4e128e5491":{"current_status":{"status_date":"2024-07-09T16:42:08.536Z","status":"going to run","last_failure_at":null,"last_success_at":null,"last_failure_message":null,"last_success_message":null,"gap":null,"bulk_create_time_durations":[],"search_after_time_durations":[],"last_look_back_date":null},"failures":[]}}, status: 200
Try number 11 out of 3200 for function waitForRuleSuccessOrStatus
                   └- ✓ pass  (10.3s)
                 └-> "after each" hook for "will return 3 results if we have a list that excludes 3 items"
                 └-> "after all" hook: afterTestSuite.trigger for "will return 3 results if we have a list that excludes 3 items"
               └-> "after all" hook in "Rule exception operators for data type text"
               └-> "after all" hook: afterTestSuite.trigger in "Rule exception operators for data type text"
             └-> "after all" hook: afterTestSuite.trigger in ""
           └-> "after all" hook: afterTestSuite.trigger in "Detection exceptions data types and operators"
         └-> "after all" hook: afterTestSuite.trigger in ""
       └-> "after all" hook: afterTestSuite.trigger in "detection engine api security and spaces enabled"
   │
   │190 passing (49.0m)
   │
   │ proc [kibana]   log   [16:42:18.730] [info][plugins-system][standard] Stopping all plugins.
   │ proc [kibana]   log   [16:42:18.732] [info][kibana-monitoring][monitoring][monitoring][plugins] Monitoring stats collection is stopped
   │ proc [kibana]   log   [16:42:18.734] [info][eventLog][plugins] event logged: {"@timestamp":"2024-07-09T16:42:18.733Z","event":{"provider":"eventLog","action":"stopping"},"message":"eventLog stopping","ecs":{"version":"1.8.0"},"kibana":{"server_uuid":"5b2de169-2785-441b-ae8c-186a1936b17d","version":"7.17.23"}}
   │ info [kibana] exited with null after 2986.4 seconds
   │ info [es] stopping node ftr
   │ info [o.e.x.m.p.NativeController] [ftr] Native controller process has stopped - no new native processes can be started
   │ info [o.e.n.Node] [ftr] stopping ...
   │ info [o.e.x.w.WatcherService] [ftr] stopping watch service, reason [shutdown initiated]
   │ info [o.e.x.w.WatcherLifeCycleService] [ftr] watcher has stopped and shutdown
   │ info [o.e.n.Node] [ftr] stopped
   │ info [o.e.n.Node] [ftr] closing ...
   │ info [o.e.n.Node] [ftr] closed
   │ info [es] stopped
   │ info [es] no debug files found, assuming es did not write any
   │ info [es] cleanup complete