We recently fixed an issue in #182883 where changes to a data view that impact the time field could cause the search source ES query rule to fail. This was done as a quick fix to get into the next 8.14 patch release, so we relied on manual testing to validate the fix. This is a followup issue to add necessary functional test coverage for this scenario, specifically these tests:
When a data view's index pattern and/or time field changes, existing rules based on the data view should succeed using the updated time field.
When a data view's time field is removed, existing rules should fail with the an error that the data view no longer contains a time field.
We recently fixed an issue in #182883 where changes to a data view that impact the time field could cause the search source ES query rule to fail. This was done as a quick fix to get into the next 8.14 patch release, so we relied on manual testing to validate the fix. This is a followup issue to add necessary functional test coverage for this scenario, specifically these tests: