[7.x] [Security Solution] Changes rule details default stack-by value (#78357)

[dplumlee]

Backports the following commits to 7.x:

• [Security Solution] Changes rule details default stack-by value ([Security Solution] Changes rule details default stack-by value #78357)

[kibanamachine]

💛 Build succeeded, but was flaky

• continuous-integration/kibana-ci/pull-request
• Commit: b318813
• Flaky suites:
  • xpack-kibana-ciGroup8

---

Test Failures

Chrome X-Pack UI Functional Tests.x-pack/test/functional/apps/discover/async_scripted_fields·js.discover async search with scripted fields query should show failed shards pop up

Link to Jenkins

Standard Out

Failed Tests Reporter:
  - Test has not failed recently on tracked branches

[00:00:00]       │
[00:00:00]         └-: discover
[00:00:00]           └-> "before all" hook
[00:08:24]           └-: async search with scripted fields
[00:08:24]             └-> "before all" hook
[00:08:24]             └-> "before all" hook
[00:08:24]               │ info [kibana_scripted_fields_on_logstash] Loading "mappings.json"
[00:08:24]               │ info [kibana_scripted_fields_on_logstash] Loading "data.json.gz"
[00:08:24]               │ info [o.e.c.m.MetadataDeleteIndexService] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] [.kibana_2/v-hRMDhvS0m2VwG04RwLrw] deleting index
[00:08:24]               │ info [o.e.c.m.MetadataDeleteIndexService] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] [.kibana_1/W0LCsgvATEu78wUVu0nqCQ] deleting index
[00:08:24]               │ info [kibana_scripted_fields_on_logstash] Deleted existing index [".kibana_2",".kibana_1"]
[00:08:24]               │ info [o.e.c.m.MetadataCreateIndexService] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] [.kibana_1] creating index, cause [api], templates [], shards [1]/[0]
[00:08:24]               │ info [o.e.c.r.a.AllocationService] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[.kibana_1][0]]]).
[00:08:24]               │ info [kibana_scripted_fields_on_logstash] Created index ".kibana_1"
[00:08:24]               │ debg [kibana_scripted_fields_on_logstash] ".kibana_1" settings {"index":{"auto_expand_replicas":"0-1","number_of_replicas":"0","number_of_shards":"1"}}
[00:08:24]               │ info [kibana_scripted_fields_on_logstash] Indexed 19 docs into ".kibana_1"
[00:08:24]               │ info [o.e.c.m.MetadataMappingService] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] [.kibana_1/6phCi2R6TK-YfLDyKsmD1g] update_mapping [_doc]
[00:08:24]               │ debg Migrating saved objects
[00:08:24]               │ proc [kibana]   log   [00:53:08.155] [info][savedobjects-service] Creating index .kibana_2.
[00:08:24]               │ info [o.e.c.m.MetadataCreateIndexService] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] [.kibana_2] creating index, cause [api], templates [], shards [1]/[1]
[00:08:24]               │ info [o.e.c.r.a.AllocationService] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] updating number_of_replicas to [0] for indices [.kibana_2]
[00:08:24]               │ info [o.e.c.r.a.AllocationService] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[.kibana_2][0]]]).
[00:08:24]               │ proc [kibana]   log   [00:53:08.232] [info][savedobjects-service] Migrating .kibana_1 saved objects to .kibana_2
[00:08:24]               │ info [o.e.c.m.MetadataMappingService] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] [.kibana_2/gXa8WjR_SL-00oq5MgDpGA] update_mapping [_doc]
[00:08:24]               │ info [o.e.c.m.MetadataMappingService] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] [.kibana_2/gXa8WjR_SL-00oq5MgDpGA] update_mapping [_doc]
[00:08:24]               │ info [o.e.c.m.MetadataMappingService] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] [.kibana_2/gXa8WjR_SL-00oq5MgDpGA] update_mapping [_doc]
[00:08:24]               │ proc [kibana]   log   [00:53:08.426] [info][savedobjects-service] Pointing alias .kibana to .kibana_2.
[00:08:24]               │ proc [kibana]   log   [00:53:08.481] [info][savedobjects-service] Finished in 328ms.
[00:08:24]               │ info [logstash_functional] Loading "mappings.json"
[00:08:24]               │ info [logstash_functional] Loading "data.json.gz"
[00:08:24]               │ info [logstash_functional] Skipped restore for existing index "logstash-2015.09.22"
[00:08:24]               │ info [logstash_functional] Skipped restore for existing index "logstash-2015.09.20"
[00:08:24]               │ info [logstash_functional] Skipped restore for existing index "logstash-2015.09.21"
[00:08:26]               │ debg set roles = test_logstash_reader,global_discover_read
[00:08:26]               │ debg creating user test_user
[00:08:26]               │ info [o.e.x.s.a.u.TransportPutUserAction] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] updated user [test_user]
[00:08:26]               │ debg created user test_user
[00:08:26]               │ debg TestSubjects.exists(kibanaChrome)
[00:08:26]               │ debg Find.existsByCssSelector('[data-test-subj="kibanaChrome"]') with timeout=2500
[00:08:26]               │ debg TestSubjects.find(kibanaChrome)
[00:08:26]               │ debg Find.findByCssSelector('[data-test-subj="kibanaChrome"]') with timeout=100000
[00:08:26]               │ debg browser[INFO] http://localhost:6141/spaces/space_selector#/view/6ecd6ea0-fec9-11ea-863e-850193cd2059?_g=(filters:!(),refreshInterval:(pause:!t,value:0),time:(from:now-15m,to:now))&_a=(columns:!(_source),filters:!(),index:'logstash-*',interval:auto,query:(language:kuery,query:''),sort:!()) 341 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-P5polb1UreUSOe5V/Pv7tc+yeZuJXiOi/3fqhGsU7BE='), or a nonce ('nonce-...') is required to enable inline execution.
[00:08:26]               │
[00:08:26]               │ debg browser[INFO] http://localhost:6141/bootstrap.js 42:19 "^ A single error about an inline script not firing due to content security policy is expected!"
[00:08:28]               │ debg applying update to kibana config: {"timepicker:timeDefaults":"{  \"from\": \"Sep 18, 2015 @ 19:37:13.000\",  \"to\": \"Sep 23, 2015 @ 02:30:09.000\"}"}
[00:08:28]             └-> query should show failed shards pop up
[00:08:28]               └-> "before each" hook: global before each
[00:08:28]               │ debg navigating to discover url: http://localhost:6141/app/discover#/
[00:08:28]               │ debg navigate to: http://localhost:6141/app/discover#/
[00:08:28]               │ debg browser[INFO] http://localhost:6141/app/discover?_t=1600995192222#/ 341 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-P5polb1UreUSOe5V/Pv7tc+yeZuJXiOi/3fqhGsU7BE='), or a nonce ('nonce-...') is required to enable inline execution.
[00:08:28]               │
[00:08:28]               │ debg browser[INFO] http://localhost:6141/bootstrap.js 42:19 "^ A single error about an inline script not firing due to content security policy is expected!"
[00:08:28]               │ debg ... sleep(700) start
[00:08:29]               │ debg ... sleep(700) end
[00:08:29]               │ debg returned from get, calling refresh
[00:08:30]               │ debg browser[WARNING] http://localhost:6141/35124/bundles/plugin/uiActionsEnhanced/uiActionsEnhanced.plugin.js 15:63628 "ActionFactory [actionFactory.id = URL_DRILLDOWN] fail to register feature for featureUsage."
[00:08:30]               │ERROR browser[SEVERE] http://localhost:6141/35124/bundles/core/core.entry.js 89:271530 TypeError: Failed to fetch
[00:08:30]               │          at Fetch._callee3$ (http://localhost:6141/35124/bundles/core/core.entry.js:26:106441)
[00:08:30]               │          at l (http://localhost:6141/35124/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:368:1020669)
[00:08:30]               │          at Generator._invoke (http://localhost:6141/35124/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:368:1020422)
[00:08:30]               │          at Generator.forEach.e.<computed> [as throw] (http://localhost:6141/35124/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:368:1021026)
[00:08:30]               │          at fetch_asyncGeneratorStep (http://localhost:6141/35124/bundles/core/core.entry.js:26:100510)
[00:08:30]               │          at _throw (http://localhost:6141/35124/bundles/core/core.entry.js:26:100918)
[00:08:30]               │ debg browser[INFO] http://localhost:6141/app/discover?_t=1600995192222#/ 341 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-P5polb1UreUSOe5V/Pv7tc+yeZuJXiOi/3fqhGsU7BE='), or a nonce ('nonce-...') is required to enable inline execution.
[00:08:30]               │
[00:08:30]               │ debg browser[INFO] http://localhost:6141/bootstrap.js 42:19 "^ A single error about an inline script not firing due to content security policy is expected!"
[00:08:30]               │ debg currentUrl = http://localhost:6141/app/discover#/
[00:08:30]               │          appUrl = http://localhost:6141/app/discover#/
[00:08:30]               │ debg TestSubjects.find(kibanaChrome)
[00:08:30]               │ debg Find.findByCssSelector('[data-test-subj="kibanaChrome"]') with timeout=60000
[00:08:31]               │ debg ... sleep(501) start
[00:08:31]               │ERROR browser[SEVERE] http://localhost:6141/api/kibana/settings - Failed to load resource: the server responded with a status of 403 (Forbidden)
[00:08:31]               │ debg browser[WARNING] http://localhost:6141/35124/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js 20:69483 "Deprecation warning: value provided is not in a recognized RFC2822 or ISO format. moment construction falls back to js Date(), which is not reliable across all browsers and versions. Non RFC2822/ISO date formats are discouraged and will be removed in an upcoming major release. Please refer to http://momentjs.com/guides/#/warnings/js-date/ for more info.
[00:08:31]               │      Arguments: 
[00:08:31]               │      [0] _isAMomentObject: true, _isUTC: false, _useUTC: false, _l: undefined, _i: Sep 18, 2015 @ 19:37:13.000, _f: undefined, _strict: undefined, _locale: [object Object]
[00:08:31]               │      Error
[00:08:31]               │          at Function.createFromInputFallback (http://localhost:6141/35124/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:21:69891)
[00:08:31]               │          at http://localhost:6141/35124/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:21:89633
[00:08:31]               │          at http://localhost:6141/35124/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:21:89684
[00:08:31]               │          at Et (http://localhost:6141/35124/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:21:89978)
[00:08:31]               │          at Ct (http://localhost:6141/35124/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:21:90355)
[00:08:31]               │          at wt (http://localhost:6141/35124/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:21:90437)
[00:08:31]               │          at r (http://localhost:6141/35124/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:21:66729)
[00:08:31]               │          at Object.parse (http://localhost:6141/35124/bundles/plugin/data/data.plugin.js:1:131161)
[00:08:31]               │          at validateTimeRange (http://localhost:6141/35124/bundles/plugin/data/data.plugin.js:27:221370)
[00:08:31]               │          at t._next (http://localhost:6141/35124/bundles/plugin/data/data.plugin.js:27:242949)"
[00:08:31]               │ debg ... sleep(501) end
[00:08:31]               │ debg in navigateTo url = http://localhost:6141/app/discover#/?_g=(filters:!(),refreshInterval:(pause:!t,value:0),time:(from:%27Sep%2018,%202015%20@%2019:37:13.000%27,to:%27Sep%2023,%202015%20@%2002:30:09.000%27))&_a=(columns:!(_source),filters:!(),index:eddf62c0-85bb-11ea-a555-0b6139dddc19,interval:auto,query:(language:kuery,query:%27%27),sort:!())
[00:08:31]               │ debg --- retry.try error: URL changed, waiting for it to settle
[00:08:32]               │ debg ... sleep(501) start
[00:08:32]               │ debg ... sleep(501) end
[00:08:32]               │ debg in navigateTo url = http://localhost:6141/app/discover#/?_g=(filters:!(),refreshInterval:(pause:!t,value:0),time:(from:%27Sep%2018,%202015%20@%2019:37:13.000%27,to:%27Sep%2023,%202015%20@%2002:30:09.000%27))&_a=(columns:!(_source),filters:!(),index:eddf62c0-85bb-11ea-a555-0b6139dddc19,interval:auto,query:(language:kuery,query:%27%27),sort:!())
[00:08:32]               │ debg TestSubjects.exists(statusPageContainer)
[00:08:32]               │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="statusPageContainer"]') with timeout=2500
[00:08:35]               │ debg --- retry.tryForTime error: [data-test-subj="statusPageContainer"] is not displayed
[00:08:36]               │ debg TestSubjects.click(indexPattern-switch-link)
[00:08:36]               │ debg Find.clickByCssSelector('[data-test-subj="indexPattern-switch-link"]') with timeout=10000
[00:08:36]               │ debg Find.findByCssSelector('[data-test-subj="indexPattern-switch-link"]') with timeout=10000
[00:08:36]               │ debg Find.setValue('[data-test-subj="indexPattern-switcher"] input', 'logsta*')
[00:08:36]               │ debg Find.findByCssSelector('[data-test-subj="indexPattern-switcher"] input') with timeout=10000
[00:08:36]               │ debg Find.clickByCssSelector('[data-test-subj="indexPattern-switcher"] [title="logsta*"]') with timeout=10000
[00:08:36]               │ debg Find.findByCssSelector('[data-test-subj="indexPattern-switcher"] [title="logsta*"]') with timeout=10000
[00:08:37]               │ debg isGlobalLoadingIndicatorVisible
[00:08:37]               │ debg TestSubjects.exists(globalLoadingIndicator)
[00:08:37]               │ debg Find.existsByDisplayedByCssSelector('[data-test-subj="globalLoadingIndicator"]') with timeout=1500
[00:08:37]               │ debg --- retry.tryForTime error: [data-test-subj="globalLoadingIndicator"] is not displayed
[00:08:37]               │ERROR browser[SEVERE] http://localhost:6141/api/kibana/settings - Failed to load resource: the server responded with a status of 403 (Forbidden)
[00:08:39]               │ debg --- retry.tryForTime failed again with the same message...
[00:08:40]               │ debg TestSubjects.exists(globalLoadingIndicator-hidden)
[00:08:40]               │ debg Find.existsByCssSelector('[data-test-subj="globalLoadingIndicator-hidden"]') with timeout=100000
[00:08:40]               │ debg TestSubjects.getVisibleText(euiToastHeader)
[00:08:40]               │ debg TestSubjects.find(euiToastHeader)
[00:08:40]               │ debg Find.findByCssSelector('[data-test-subj="euiToastHeader"]') with timeout=10000
[00:08:40]               │ debg Unable to update UI setting
[00:08:40]               │ debg --- retry.tryForTime error: expected 'Unable to update UI setting' to equal '1 of 3 shards failed'
[00:08:40]               │ debg TestSubjects.getVisibleText(euiToastHeader)
[00:08:40]               │ debg TestSubjects.find(euiToastHeader)
[00:08:40]               │ debg Find.findByCssSelector('[data-test-subj="euiToastHeader"]') with timeout=10000
[00:08:40]               │ debg Unable to update UI setting
[00:08:40]               │ debg --- retry.tryForTime failed again with the same message...
[00:08:41]               │ debg TestSubjects.getVisibleText(euiToastHeader)
[00:08:41]               │ debg TestSubjects.find(euiToastHeader)
[00:08:41]               │ debg Find.findByCssSelector('[data-test-subj="euiToastHeader"]') with timeout=10000
[00:08:41]               │ debg Unable to update UI setting
[00:08:41]               │ debg --- retry.tryForTime failed again with the same message...
[00:08:41]               │ debg TestSubjects.getVisibleText(euiToastHeader)
[00:08:41]               │ debg TestSubjects.find(euiToastHeader)
[00:08:41]               │ debg Find.findByCssSelector('[data-test-subj="euiToastHeader"]') with timeout=10000
[00:08:41]               │ debg Unable to update UI setting
[00:08:41]               │ debg --- retry.tryForTime failed again with the same message...
[00:08:42]               │ debg TestSubjects.getVisibleText(euiToastHeader)
[00:08:42]               │ debg TestSubjects.find(euiToastHeader)
[00:08:42]               │ debg Find.findByCssSelector('[data-test-subj="euiToastHeader"]') with timeout=10000
[00:08:42]               │ debg Unable to update UI setting
[00:08:42]               │ debg --- retry.tryForTime failed again with the same message...
[00:08:42]               │ debg TestSubjects.getVisibleText(euiToastHeader)
[00:08:42]               │ debg TestSubjects.find(euiToastHeader)
[00:08:42]               │ debg Find.findByCssSelector('[data-test-subj="euiToastHeader"]') with timeout=10000
[00:08:43]               │ debg Unable to update UI setting
[00:08:43]               │ debg --- retry.tryForTime failed again with the same message...
[00:08:43]               │ debg TestSubjects.getVisibleText(euiToastHeader)
[00:08:43]               │ debg TestSubjects.find(euiToastHeader)
[00:08:43]               │ debg Find.findByCssSelector('[data-test-subj="euiToastHeader"]') with timeout=10000
[00:08:43]               │ debg Unable to update UI setting
[00:08:43]               │ debg --- retry.tryForTime failed again with the same message...
[00:08:44]               │ debg TestSubjects.getVisibleText(euiToastHeader)
[00:08:44]               │ debg TestSubjects.find(euiToastHeader)
[00:08:44]               │ debg Find.findByCssSelector('[data-test-subj="euiToastHeader"]') with timeout=10000
[00:08:44]               │ debg Unable to update UI setting
[00:08:44]               │ debg --- retry.tryForTime failed again with the same message...
[00:08:44]               │ debg TestSubjects.getVisibleText(euiToastHeader)
[00:08:44]               │ debg TestSubjects.find(euiToastHeader)
[00:08:44]               │ debg Find.findByCssSelector('[data-test-subj="euiToastHeader"]') with timeout=10000
[00:08:44]               │ debg Unable to update UI setting
[00:08:44]               │ debg --- retry.tryForTime failed again with the same message...
[00:08:45]               │ debg TestSubjects.getVisibleText(euiToastHeader)
[00:08:45]               │ debg TestSubjects.find(euiToastHeader)
[00:08:45]               │ debg Find.findByCssSelector('[data-test-subj="euiToastHeader"]') with timeout=10000
[00:08:45]               │ debg Unable to update UI setting
[00:08:45]               │ debg --- retry.tryForTime failed again with the same message...
[00:08:45]               │ debg TestSubjects.getVisibleText(euiToastHeader)
[00:08:45]               │ debg TestSubjects.find(euiToastHeader)
[00:08:45]               │ debg Find.findByCssSelector('[data-test-subj="euiToastHeader"]') with timeout=10000
[00:08:45]               │ debg Unable to update UI setting
[00:08:45]               │ debg --- retry.tryForTime failed again with the same message...
[00:08:45]               │ info [o.e.x.i.IndexLifecycleTransition] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] moving index [.kibana-event-log-7.10.0-000001] from [{"phase":"hot","action":"unfollow","name":"wait-for-follow-shard-tasks"}] to [{"phase":"hot","action":"unfollow","name":"pause-follower-index"}] in policy [kibana-event-log-policy]
[00:08:45]               │ info [o.e.x.i.IndexLifecycleTransition] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] moving index [ilm-history-3-000001] from [{"phase":"hot","action":"unfollow","name":"wait-for-follow-shard-tasks"}] to [{"phase":"hot","action":"unfollow","name":"pause-follower-index"}] in policy [ilm-history-ilm-policy]
[00:08:45]               │ info [o.e.x.i.IndexLifecycleTransition] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] moving index [.kibana-event-log-7.10.0-000001] from [{"phase":"hot","action":"unfollow","name":"pause-follower-index"}] to [{"phase":"hot","action":"unfollow","name":"close-follower-index"}] in policy [kibana-event-log-policy]
[00:08:45]               │ info [o.e.x.i.IndexLifecycleTransition] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] moving index [ilm-history-3-000001] from [{"phase":"hot","action":"unfollow","name":"pause-follower-index"}] to [{"phase":"hot","action":"unfollow","name":"close-follower-index"}] in policy [ilm-history-ilm-policy]
[00:08:45]               │ info [o.e.x.i.IndexLifecycleTransition] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] moving index [.kibana-event-log-7.10.0-000001] from [{"phase":"hot","action":"unfollow","name":"close-follower-index"}] to [{"phase":"hot","action":"unfollow","name":"unfollow-follower-index"}] in policy [kibana-event-log-policy]
[00:08:45]               │ info [o.e.x.i.IndexLifecycleTransition] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] moving index [ilm-history-3-000001] from [{"phase":"hot","action":"unfollow","name":"close-follower-index"}] to [{"phase":"hot","action":"unfollow","name":"unfollow-follower-index"}] in policy [ilm-history-ilm-policy]
[00:08:45]               │ info [o.e.x.i.IndexLifecycleTransition] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] moving index [.kibana-event-log-7.10.0-000001] from [{"phase":"hot","action":"unfollow","name":"unfollow-follower-index"}] to [{"phase":"hot","action":"unfollow","name":"open-follower-index"}] in policy [kibana-event-log-policy]
[00:08:45]               │ info [o.e.x.i.IndexLifecycleTransition] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] moving index [ilm-history-3-000001] from [{"phase":"hot","action":"unfollow","name":"unfollow-follower-index"}] to [{"phase":"hot","action":"unfollow","name":"open-follower-index"}] in policy [ilm-history-ilm-policy]
[00:08:46]               │ info [o.e.x.i.IndexLifecycleTransition] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] moving index [.kibana-event-log-7.10.0-000001] from [{"phase":"hot","action":"unfollow","name":"open-follower-index"}] to [{"phase":"hot","action":"unfollow","name":"wait-for-yellow-step"}] in policy [kibana-event-log-policy]
[00:08:46]               │ info [o.e.x.i.IndexLifecycleTransition] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] moving index [ilm-history-3-000001] from [{"phase":"hot","action":"unfollow","name":"open-follower-index"}] to [{"phase":"hot","action":"unfollow","name":"wait-for-yellow-step"}] in policy [ilm-history-ilm-policy]
[00:08:46]               │ info [o.e.x.i.IndexLifecycleTransition] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] moving index [.kibana-event-log-7.10.0-000001] from [{"phase":"hot","action":"unfollow","name":"wait-for-yellow-step"}] to [{"phase":"hot","action":"rollover","name":"check-rollover-ready"}] in policy [kibana-event-log-policy]
[00:08:46]               │ info [o.e.x.i.IndexLifecycleTransition] [kibana-ci-immutable-debian-tests-xxl-1600992760740583556] moving index [ilm-history-3-000001] from [{"phase":"hot","action":"unfollow","name":"wait-for-yellow-step"}] to [{"phase":"hot","action":"rollover","name":"check-rollover-ready"}] in policy [ilm-history-ilm-policy]
[00:08:46]               │ debg TestSubjects.getVisibleText(euiToastHeader)
[00:08:46]               │ debg TestSubjects.find(euiToastHeader)
[00:08:46]               │ debg Find.findByCssSelector('[data-test-subj="euiToastHeader"]') with timeout=10000
[00:08:46]               │ debg Unable to update UI setting
[00:08:46]               │ debg --- retry.tryForTime failed again with the same message...
[00:08:46]               │ debg TestSubjects.getVisibleText(euiToastHeader)
[00:08:46]               │ debg TestSubjects.find(euiToastHeader)
[00:08:46]               │ debg Find.findByCssSelector('[data-test-subj="euiToastHeader"]') with timeout=10000
[00:08:46]               │ debg Unable to update UI setting
[00:08:46]               │ debg --- retry.tryForTime failed again with the same message...
[00:08:47]               │ debg TestSubjects.getVisibleText(euiToastHeader)
[00:08:47]               │ debg TestSubjects.find(euiToastHeader)
[00:08:47]               │ debg Find.findByCssSelector('[data-test-subj="euiToastHeader"]') with timeout=10000
[00:08:47]               │ debg Unable to update UI setting
[00:08:47]               │ debg --- retry.tryForTime failed again with the same message...
[00:08:47]               │ debg TestSubjects.getVisibleText(euiToastHeader)
[00:08:47]               │ debg TestSubjects.find(euiToastHeader)
[00:08:47]               │ debg Find.findByCssSelector('[data-test-subj="euiToastHeader"]') with timeout=10000
[00:08:47]               │ debg Unable to update UI setting
[00:08:47]               │ debg --- retry.tryForTime failed again with the same message...
[00:08:48]               │ debg TestSubjects.getVisibleText(euiToastHeader)
[00:08:48]               │ debg TestSubjects.find(euiToastHeader)
[00:08:48]               │ debg Find.findByCssSelector('[data-test-subj="euiToastHeader"]') with timeout=10000
[00:08:58]               │ debg --- retry.tryForTime error: Waiting for element to be located By(css selector, [data-test-subj="euiToastHeader"])
[00:08:58]               │      Wait timed out after 10021ms
[00:08:58]               │ debg TestSubjects.getVisibleText(euiToastHeader)
[00:08:58]               │ debg TestSubjects.find(euiToastHeader)
[00:08:58]               │ debg Find.findByCssSelector('[data-test-subj="euiToastHeader"]') with timeout=10000
[00:09:08]               │ debg --- retry.tryForTime error: Waiting for element to be located By(css selector, [data-test-subj="euiToastHeader"])
[00:09:08]               │      Wait timed out after 10045ms
[00:09:09]               │ info Taking screenshot "/dev/shm/workspace/parallel/4/kibana/x-pack/test/functional/screenshots/failure/discover async search with scripted fields query should show failed shards pop up.png"
[00:09:09]               │ info Current URL is: http://localhost:6141/app/discover#/?_g=(filters:!(),refreshInterval:(pause:!t,value:0),time:(from:%27Sep%2018,%202015%20@%2019:37:13.000%27,to:%27Sep%2023,%202015%20@%2002:30:09.000%27))&_a=(columns:!(_source),filters:!(),index:da2aebe0-913d-11ea-bf44-c796fb3350db,interval:auto,query:(language:kuery,query:%27%27),sort:!())
[00:09:09]               │ info Saving page source to: /dev/shm/workspace/parallel/4/kibana/x-pack/test/functional/failure_debug/html/discover async search with scripted fields query should show failed shards pop up.html
[00:09:09]               └- ✖ fail: discover async search with scripted fields query should show failed shards pop up
[00:09:09]               │      Error: retry.tryForTime timeout: TimeoutError: Waiting for element to be located By(css selector, [data-test-subj="euiToastHeader"])
[00:09:09]               │ Wait timed out after 10045ms
[00:09:09]               │     at /dev/shm/workspace/kibana/node_modules/selenium-webdriver/lib/webdriver.js:842:17
[00:09:09]               │     at process._tickCallback (internal/process/next_tick.js:68:7)
[00:09:09]               │       at onFailure (/dev/shm/workspace/parallel/4/kibana/test/common/services/retry/retry_for_success.ts:28:9)
[00:09:09]               │       at retryForSuccess (/dev/shm/workspace/parallel/4/kibana/test/common/services/retry/retry_for_success.ts:68:13)
[00:09:09]               │ 
[00:09:09]               │ 

Stack Trace

Error: retry.tryForTime timeout: TimeoutError: Waiting for element to be located By(css selector, [data-test-subj="euiToastHeader"])
Wait timed out after 10045ms
    at /dev/shm/workspace/kibana/node_modules/selenium-webdriver/lib/webdriver.js:842:17
    at process._tickCallback (internal/process/next_tick.js:68:7)
    at onFailure (/dev/shm/workspace/parallel/4/kibana/test/common/services/retry/retry_for_success.ts:28:9)
    at retryForSuccess (/dev/shm/workspace/parallel/4/kibana/test/common/services/retry/retry_for_success.ts:68:13)

---

Metrics [docs]

async chunks size

id	value	diff	baseline
securitySolution	10.2MB	+122.0B	10.2MB

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream