elastic / elastic/beats

[Flaky Test] auditbeat/module/file_integrity/kprobes Test_Monitor/TestNew

Open
#45,827 26 comments 0 reactions 0 assignees Claimed by @efd6 View on GitHub
flaky-test Team:Security-Service Integrations
Dominant language
Go
Stars
12.7k
Forks
5k
Avg merge
2d 15m
Merged PRs (30d)
385

Description

## Flaky Test

* **Test Name:** Test_Monitor/TestNew
* **Link:** https://github.com/elastic/beats/blob/8df1efe87f1cee80adb222429309ac1a0c4efede/auditbeat/module/file_integrity/kprobes/monitor_test.go#L46
* **Branch:** `main`
* **Artifact Link:** https://buildkite.com/elastic/auditbeat/builds/19486/steps/table?jid=0198854e-14bf-4c7a-b4a7-af6869bbdce1#0198854e-14bf-4c7a-b4a7-af6869bbdce1/145-361
* **Notes:** It has failed multiple times on `main`, but it passes on my machine.
### Stack Trace

```
2025-08-07 12:20:08 EDT
=== Failed
2025-08-07 12:20:08 EDT
=== FAIL: auditbeat/module/file_integrity/kprobes Test_Monitor/TestNew (38.26s)
2025-08-07 12:20:08 EDT
monitor_test.go:487:
2025-08-07 12:20:08 EDT
Error Trace: /go/src/github.com/elastic/beats/auditbeat/module/file_integrity/kprobes/monitor_test.go:487
2025-08-07 12:20:08 EDT
Error: Received unexpected error:
2025-08-07 12:20:08 EDT
probe missing events
2025-08-07 12:20:08 EDT
probe missing events
2025-08-07 12:20:08 EDT
timeout
2025-08-07 12:20:08 EDT
probe missing events
2025-08-07 12:20:08 EDT
could not validate probes
2025-08-07 12:20:08 EDT
Test: Test_Monitor/TestNew
2025-08-07 12:20:08 EDT
2025-08-07 12:20:08 EDT
=== FAIL: auditbeat/module/file_integrity/kprobes Test_Monitor (38.26s)
```

Contributor guide

Open the contributing guide

Research direction

Start with auditbeat/module/file_integrity/kprobes/monitor_test.go, especially Test_Monitor/TestNew and the failure at line 487. Run the named test on main and compare the repeated CI failures involving missing probe events and timeouts. Done means the test no longer flakes in repeated CI runs.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
testing-qa
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.