[Stack 8.16.0-SNAPSHOT] [cloudflare] Failing test daily: system test: cursor in cloudflare.logpull

[elastic-vault-github-plugin-prod]

• Stack version: 8.16.0-SNAPSHOT
• Package: cloudflare
• Failing test: system test: cursor
• DataStream: logpull
• Owners:
  • @elastic/security-service-integrations

Failure:

test case failed: could not find hits in logs-cloudflare.logpull-98791 data stream

First build failed: https://buildkite.com/elastic/integrations/builds/15011

Latest failed builds:

• https://buildkite.com/elastic/integrations/builds/15615
• https://buildkite.com/elastic/integrations/builds/16514
• https://buildkite.com/elastic/integrations/builds/16554

[efd6]

Looking at the set of failures in these, I see (mod the tenable_io issue, which is addressed by #10940) over a wide range of packages: no hits; changes in processor behaviour; missing field definitions — present in the definitions files; and failed CEL evaluations. This looks very much to me like a global CI failure rather than a specific cyberarkpas failure.

All of the elastic-agent logs that are retained in the builders' stores have staled out, so to investigate this further we will need to see a new failure.

Same symptoms as #10620

[narph]

@elastic/ecosystem can you have a look?

[efd6]

This has not failed since 2024-08-26T01:32:00Z.