[Serverless observability] [box_events] Failing test daily: pipeline test: test-anomalous-download.log in box_events.events

[elastic-vault-github-plugin-prod]

• Stack version: Same as in Pull Request builds
• Serverless: observability
• Package: box_events
• Failing test: pipeline test: test-anomalous-download.log
• DataStream: events
• Owners:
  • @elastic/security-service-integrations

Failure:

test case failed: one or more problems with fields found in documents: [0] unexpected pipeline error: [cannot remove [created_at] from null as part of path [box.source.created_at]]

First build failed: https://buildkite.com/elastic/integrations-serverless/builds/1041

Latest 5 failed builds:

• https://buildkite.com/elastic/integrations-serverless/builds/1083
• https://buildkite.com/elastic/integrations-serverless/builds/1085
• https://buildkite.com/elastic/integrations-serverless/builds/1086
• https://buildkite.com/elastic/integrations-serverless/builds/1088
• https://buildkite.com/elastic/integrations-serverless/builds/1091

[efd6]

This should be fixed by elastic/elasticsearch#126417.

[efd6]

This has not failed since April 14.