[Serverless security] [box_events] Failing test daily: pipeline test: test-anomalous-download.log in box_events.events

[elastic-vault-github-plugin-prod]

• Stack version: Same as in Pull Request builds
• Serverless: security
• Package: box_events
• Failing test: pipeline test: test-anomalous-download.log
• DataStream: events
• Owners:
  • @elastic/security-service-integrations

Failure:

test case failed: one or more problems with fields found in documents: [0] unexpected pipeline error: [cannot remove [created_at] from null as part of path [box.source.created_at]]

First build failed: https://buildkite.com/elastic/integrations-serverless/builds/1042

Latest 5 failed builds:

• https://buildkite.com/elastic/integrations-serverless/builds/1082
• https://buildkite.com/elastic/integrations-serverless/builds/1084
• https://buildkite.com/elastic/integrations-serverless/builds/1087
• https://buildkite.com/elastic/integrations-serverless/builds/1089
• https://buildkite.com/elastic/integrations-serverless/builds/1090

[efd6]

This should be fixed by elastic/elasticsearch#126417.

[efd6]

This has not failed since April 14.