Failing test: Entity Analytics - Risk Engine Integration Tests - ESS Env - Trial License.x-pack/test/security_solution_api_integration/test_suites/entity_analytics/risk_engine/trial_license_complete_tier/risk_score_preview·ts - Entity Analytics - Risk Engine @ess @serverless Risk Scoring Preview API with auditbeat data risk score ordering aggregates multiple scores such that the highest-risk scores contribute the majority of the score

[kibanamachine]

A test failed on a tracked branch

Error: expected [ { id_field: 'host.name',
    id_value: 'host-1',
    calculated_level: 'High',
    calculated_score: 192.88436117703117,
    calculated_score_norm: 73.84546752566278,
    category_1_score: 73.84546752566278,
    category_1_count: 100 } ] to sort of equal [ { calculated_level: 'High',
    calculated_score: 225.1106801442913,
    calculated_score_norm: 86.18326192354185,
    category_1_count: 100,
    category_1_score: 86.18326192354185,
    id_field: 'host.name',
    id_value: 'host-1' } ]
    at Assertion.assert (expect.js:100:11)
    at Assertion.eql (expect.js:244:8)
    at Context.<anonymous> (risk_score_preview.ts:406:51)
    at processTicksAndRejections (node:internal/process/task_queues:95:5)
    at Object.apply (wrap_function.js:73:16) {
  actual: '[\n' +
    '  {\n' +
    '    "calculated_level": "High"\n' +
    '    "calculated_score": 192.88436117703117\n' +
    '    "calculated_score_norm": 73.84546752566278\n' +
    '    "category_1_count": 100\n' +
    '    "category_1_score": 73.84546752566278\n' +
    '    "id_field": "host.name"\n' +
    '    "id_value": "host-1"\n' +
    '  }\n' +
    ']',
  expected: '[\n' +
    '  {\n' +
    '    "calculated_level": "High"\n' +
    '    "calculated_score": 225.1106801442913\n' +
    '    "calculated_score_norm": 86.18326192354185\n' +
    '    "category_1_count": 100\n' +
    '    "category_1_score": 86.18326192354185\n' +
    '    "id_field": "host.name"\n' +
    '    "id_value": "host-1"\n' +
    '  }\n' +
    ']',
  showDiff: true
}

First failure: kibana-on-merge - main

[elasticmachine]

Pinging @elastic/security-entity-analytics (Team:Entity Analytics)

[jaredburgettelastic]

We're reverting this code, and investigating why it failed on-merge