Skip to content

changelog: security_detection_engine 8.19.33 (backport sync from PR #21301) - #21304

Merged
shashank-elastic merged 2 commits into
mainfrom
changelog/pr-21301
Sep 16, 2026
Merged

shashank-elastic merged 2 commits into
mainfrom
changelog/pr-21301

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

Automated changelog sync from backport PR #21301.

Generated by the sync-backport-changelog workflow.

@github-actions github-actions Bot added changelog-link-check:skip backport:sync-changelog PR syncs changelog entries back to main; backport checklist workflow is skipped automatically labels Sep 16, 2026
@github-actions
github-actions Bot requested a review from a team as a code owner September 16, 2026 10:02
@github-actions github-actions Bot added changelog-link-check:skip backport:sync-changelog PR syncs changelog entries back to main; backport checklist workflow is skipped automatically labels Sep 16, 2026
@github-actions

Copy link
Copy Markdown
Contributor Author

TL;DR

The failing Buildkite job is an external OOM FTR test failure (expected 200, got 502 Bad Gateway) and does not map to code changed in this PR. Immediate action is to rerun the failed OOM test job; if it reproduces consistently, investigate Kibana/FTR environment health for that pipeline.

Remediation

  • Retry the failed Buildkite OOM test step for this PR/build.
  • If it fails again, inspect the downstream FTR environment/service behind the prebuilt-rules install API in the appex-qa-stateful-security-prebuilt-rules-ftr-oom-testing pipeline.
  • Confirm this PR still only changes packages/security_detection_engine/changelog.yml before re-running required checks.
Investigation details

Root Cause

The only failed job is Run FTR OOM tests in a downstream pipeline, and the failure is an HTTP gateway error in Kibana API integration tests, not a compile/test assertion tied to this repo diff.

  • Failing assertion points to Kibana test code path outside this repository:
    x-pack/solutions/security/test/security_solution_api_integration/test_suites/detections_response/rules_management/prebuilt_rules/oom_testing/install_prebuilt_rules/install_prebuilt_rules.ts:133
  • PR diff contains only changelog metadata edits in packages/security_detection_engine/changelog.yml (hunk @@ -470,6 +470,11 @@) and no runtime code/test logic changes.

Evidence

Error: expected 200 "OK", got 502 "Bad Gateway"
at Context.<anonymous> (x-pack/.../install_prebuilt_rules.ts:133:10)

Verification

  • Not run locally (failure is in external Buildkite FTR environment and references Kibana test harness paths unavailable in this checkout).

Follow-up

If retries show a stable repro, capture the response body/server logs for the failing 502 endpoint in the OOM FTR environment to determine whether it is service readiness/resource pressure versus a behavioral regression.


What is this? | From workflow: PR Buildkite Detective

Give us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not.

@github-actions github-actions Bot mentioned this pull request Sep 16, 2026
@github-actions

Copy link
Copy Markdown
Contributor Author

✅ Elastic Docs Style Checker (Vale)

No issues found on modified lines!


The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale.

@shashank-elastic
shashank-elastic enabled auto-merge (squash) September 16, 2026 12:02
@qcorporation qcorporation added the Integration:security_detection_engine Prebuilt Security Detection Rules label Sep 16, 2026
@infra-vault-gh-plugin-prod

Copy link
Copy Markdown

💚 Build Succeeded

History

cc @shashank-elastic

@shashank-elastic
shashank-elastic merged commit aef9ac1 into main Sep 16, 2026
9 checks passed
@shashank-elastic
shashank-elastic deleted the changelog/pr-21301 branch September 16, 2026 12:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport:sync-changelog PR syncs changelog entries back to main; backport checklist workflow is skipped automatically changelog-link-check:skip Integration:security_detection_engine Prebuilt Security Detection Rules

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants