Failing test: Rules Management - Prebuilt Rules Management Integration Tests - ESS Env - Trial License.x-pack/test/security_solution_api_integration/test_suites/detections_response/rules_management/prebuilt_rules/management/trial_license_complete_tier/fleet_integration·ts - Rules Management - Prebuilt Rules - Prebuilt Rules Management @ess @serverless @skipInServerlessMKI install_prebuilt_rules_from_real_package should install prebuilt rules from the package storage

[kibanamachine]

A test failed on a tracked branch

Error: retry.tryWithRetries reached timeout 120000 ms waiting for 'installPrebuiltRulesFleetPackage'
Error: socket hang up
    at Socket.socketOnEnd (node:_http_client:524:23)
    at Socket.emit (node:events:531:35)
    at endReadableNT (node:internal/streams/readable:1696:12)
    at processTicksAndRejections (node:internal/process/task_queues:82:21)
    at onFailure (retry_for_success.ts:18:9)
    at retryForSuccess (retry_for_success.ts:85:7)
    at RetryService.tryWithRetries (retry.ts:113:12)
    at installPrebuiltRulesFleetPackage (install_prebuilt_rules_fleet_package.ts:72:22)
    at Context.<anonymous> (fleet_integration.ts:47:7)
    at Object.apply (wrap_function.js:74:16)

First failure: kibana-on-merge - main

[elasticmachine]

Pinging @elastic/security-detection-rule-management (Team:Detection Rule Management)

[banderror]

The installPrebuiltRulesFleetPackage implements some retry logic:

kibana/x-pack/test/security_solution_api_integration/test_suites/detections_response/utils/rules/prebuilt_rules/install_prebuilt_rules_fleet_package.ts

Lines 31 to 69 in 860d5b6

	export const installPrebuiltRulesFleetPackage = async ({
	es,
	supertest,
	version,
	overrideExistingPackage,
	retryService,
	}: {
	es: Client;
	supertest: SuperTest.Agent;
	version?: string;
	overrideExistingPackage: boolean;
	retryService: RetryService;
	}): Promise<InstallPackageResponse | BulkInstallPackagesResponse> => {
	if (version) {
	// Install a specific version
	const response = await retryService.tryWithRetries<InstallPackageResponse>(
	installPrebuiltRulesFleetPackage.name,
	async () => {
	const testResponse = await supertest
	.post(epmRouteService.getInstallPath('security_detection_engine', version))
	.set('kbn-xsrf', 'true')
	.send({
	force: overrideExistingPackage,
	})
	.expect(200);
	expect((testResponse.body as InstallPackageResponse).items).toBeDefined();
	expect((testResponse.body as InstallPackageResponse).items.length).toBeGreaterThan(0);
	return testResponse.body;
	},
	{
	retryCount: MAX_RETRIES,
	timeout: ATTEMPT_TIMEOUT,
	}
	);
	await refreshSavedObjectIndices(es);
	return response;

However, the 120s timeout still wasn't enough to mitigate a network issue. The problem was that this 120s timeout applies to the whole function and the function did only 1 attempt. I think we should increase the timeout and make it 120s * 3 attempts.

[elasticmachine]

Pinging @elastic/security-detections-response (Team:Detections and Resp)

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)