[Stack 8.17.0-SNAPSHOT] [mimecast] Failing test daily: pipeline test: test-audit-events.log in mimecast.audit_events

[elastic-vault-github-plugin-prod[bot]]

• Stack version: 8.17.0-SNAPSHOT
• Package: mimecast
• Failing test: pipeline test: test-audit-events.log
• DataStream: audit_events
• Owners:
  • @elastic/security-service-integrations

Failure:

test case failed: Expected results are different from actual ones: --- want
+++ got
@@ -109,153 +109,138 @@
         {
             "@timestamp": "2021-10-11T17:17:30.000Z",
             "client": {
-                "as": {
-                    "number": 35908
-                },
-                "geo": {
-                    "continent_name": "Asia",
-                    "country_iso_code": "BT",
-                    "country_name": "Bhutan",
-                    "location": {
-                        "lat": 27.5,
-                        "lon": 90.5
-                    }
-                },
-                "ip": "67.43.156.15"
-            },
-            "ecs": {
-                "version": "8.11.0"
+                "ip": "67.43.156.15"
+            },
+            "ecs": {
+                "version": "8.11.0"
+            },
+            "error": {
+                "message": [
+                    "Processor 'conditional' with tag '' failed with message 'Text '2021-10-11 18:17

Latest issue closed for the same test: https://github.com/elastic/integrations/issues/11634

First build failed: https://buildkite.com/elastic/integrations/builds/18259

Latest 5 failed builds:

• https://buildkite.com/elastic/integrations/builds/18531
• https://buildkite.com/elastic/integrations/builds/18582
• https://buildkite.com/elastic/integrations/builds/18631
• https://buildkite.com/elastic/integrations/builds/18636
• https://buildkite.com/elastic/integrations/builds/18642