From 13fbb9f409852482356f8ff09e5a49dc27a0876c Mon Sep 17 00:00:00 2001
From: lgestc <lukasz.gmys@elastic.co>
Date: Wed, 13 Dec 2023 15:23:48 +0100
Subject: [PATCH] [Security Solution] Fix flaky sourcerer timeline test

---
 .../sourcerer/sourcerer_timeline.cy.ts                | 11 +++--------
 1 file changed, 3 insertions(+), 8 deletions(-)

diff --git a/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/sourcerer/sourcerer_timeline.cy.ts b/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/sourcerer/sourcerer_timeline.cy.ts
index 8e7be3970440e..30e1e39b4cd3e 100644
--- a/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/sourcerer/sourcerer_timeline.cy.ts
+++ b/x-pack/test/security_solution_cypress/cypress/e2e/detection_response/detection_engine/sourcerer/sourcerer_timeline.cy.ts
@@ -37,10 +37,9 @@ import { getTimeline, getTimelineModifiedSourcerer } from '../../../../objects/t
 import { closeTimeline, openTimelineById } from '../../../../tasks/timeline';
 
 const siemDataViewTitle = 'Security Default Data View';
-const dataViews = ['auditbeat-*,fakebeat-*', 'auditbeat-*,*beat*,siem-read*,.kibana*,fakebeat-*'];
+const dataViews = ['logs-*', 'metrics-*', '.kibana-event-log-*'];
 
-// TODO: https://github.com/elastic/kibana/issues/161539
-describe.skip('Timeline scope', { tags: ['@ess', '@serverless', '@brokenInServerless'] }, () => {
+describe('Timeline scope', { tags: ['@ess', '@serverless', '@brokenInServerless'] }, () => {
   beforeEach(() => {
     cy.clearLocalStorage();
     login();
@@ -78,12 +77,8 @@ describe.skip('Timeline scope', { tags: ['@ess', '@serverless', '@brokenInServer
     it('shows modified badge when index patterns change and removes when reset', () => {
       openTimelineUsingToggle();
       openSourcerer('timeline');
-      openDataViewSelection();
-      cy.get(SOURCERER.selectListOption).contains(dataViews[1]).click();
-      isDataViewSelection(dataViews[1]);
       openAdvancedSettings();
-      const patterns = dataViews[1].split(',');
-      deselectSourcererOptions([patterns[0]]);
+      deselectSourcererOptions(['.alerts-security.alerts-default']);
       saveSourcerer();
       cy.get(SOURCERER.badgeModified).should(`exist`);
       openSourcerer('timeline');