diff --git a/x-pack/test/detection_engine_api_integration/security_and_spaces/tests/exception_operators_data_types/long.ts b/x-pack/test/detection_engine_api_integration/security_and_spaces/tests/exception_operators_data_types/long.ts
index 56e8eb95374d5..69442c9980379 100644
--- a/x-pack/test/detection_engine_api_integration/security_and_spaces/tests/exception_operators_data_types/long.ts
+++ b/x-pack/test/detection_engine_api_integration/security_and_spaces/tests/exception_operators_data_types/long.ts
@@ -516,7 +516,7 @@ export default ({ getService }: FtrProviderContext) => {
 
         runner.test('will return 3 results if we have a list that includes 1 long', async () => {
           const filename = await importFile(supertest, log, 'long', ['1']);
-          const rule = getRuleForSignalTesting(['long_as_string']);
+          const rule = getRuleForSignalTesting(['long_as_string'], '');
           const { id } = await createRuleWithExceptionEntries(supertest, log, rule, [
             [
               {
@@ -539,7 +539,7 @@ export default ({ getService }: FtrProviderContext) => {
 
         runner.test('will return 2 results if we have a list that includes 2 long', async () => {
           const filename = await importFile(supertest, log, 'long', ['1', '3']);
-          const rule = getRuleForSignalTesting(['long_as_string']);
+          const rule = getRuleForSignalTesting(['long_as_string'], '');
           const { id } = await createRuleWithExceptionEntries(supertest, log, rule, [
             [
               {
@@ -562,7 +562,7 @@ export default ({ getService }: FtrProviderContext) => {
 
         runner.test('will return 0 results if we have a list that includes all long', async () => {
           const filename = await importFile(supertest, log, 'long', ['1', '2', '3', '4']);
-          const rule = getRuleForSignalTesting(['long_as_string']);
+          const rule = getRuleForSignalTesting(['long_as_string'], '');
           const { id } = await createRuleWithExceptionEntries(supertest, log, rule, [
             [
               {
@@ -590,7 +590,7 @@ export default ({ getService }: FtrProviderContext) => {
               '2',
               '3',
             ]);
-            const rule = getRuleForSignalTesting(['long_as_string']);
+            const rule = getRuleForSignalTesting(['long_as_string'], '');
             const { id } = await createRuleWithExceptionEntries(supertest, log, rule, [
               [
                 {
@@ -697,7 +697,7 @@ export default ({ getService }: FtrProviderContext) => {
 
         runner.test('will return 1 result if we have a list that excludes 1 long', async () => {
           const filename = await importFile(supertest, log, 'long', ['1']);
-          const rule = getRuleForSignalTesting(['long_as_string']);
+          const rule = getRuleForSignalTesting(['long_as_string'], '');
           const { id } = await createRuleWithExceptionEntries(supertest, log, rule, [
             [
               {
@@ -720,7 +720,7 @@ export default ({ getService }: FtrProviderContext) => {
 
         runner.test('will return 2 results if we have a list that excludes 2 long', async () => {
           const filename = await importFile(supertest, log, 'long', ['1', '3']);
-          const rule = getRuleForSignalTesting(['long_as_string']);
+          const rule = getRuleForSignalTesting(['long_as_string'], '');
           const { id } = await createRuleWithExceptionEntries(supertest, log, rule, [
             [
               {
@@ -743,7 +743,7 @@ export default ({ getService }: FtrProviderContext) => {
 
         runner.test('will return 4 results if we have a list that excludes all long', async () => {
           const filename = await importFile(supertest, log, 'long', ['1', '2', '3', '4']);
-          const rule = getRuleForSignalTesting(['long_as_string']);
+          const rule = getRuleForSignalTesting(['long_as_string'], '');
           const { id } = await createRuleWithExceptionEntries(supertest, log, rule, [
             [
               {
@@ -772,7 +772,7 @@ export default ({ getService }: FtrProviderContext) => {
               '2',
               '3',
             ]);
-            const rule = getRuleForSignalTesting(['long_as_string']);
+            const rule = getRuleForSignalTesting(['long_as_string'], '');
             const { id } = await createRuleWithExceptionEntries(supertest, log, rule, [
               [
                 {
diff --git a/x-pack/test/detection_engine_api_integration/security_and_spaces/tests/exception_operators_data_types/text.ts b/x-pack/test/detection_engine_api_integration/security_and_spaces/tests/exception_operators_data_types/text.ts
index f1596cfc713da..f40004b4ec562 100644
--- a/x-pack/test/detection_engine_api_integration/security_and_spaces/tests/exception_operators_data_types/text.ts
+++ b/x-pack/test/detection_engine_api_integration/security_and_spaces/tests/exception_operators_data_types/text.ts
@@ -558,7 +558,7 @@ export default ({ getService }: FtrProviderContext) => {
 
         runner.test('will return 3 results if we have a list that includes 1 text', async () => {
           const filename = await importFile(supertest, log, 'text', ['one']);
-          const rule = getRuleForSignalTesting(['text_no_spaces']);
+          const rule = getRuleForSignalTesting(['text_no_spaces'], '');
           const { id } = await createRuleWithExceptionEntries(supertest, log, rule, [
             [
               {
@@ -581,7 +581,7 @@ export default ({ getService }: FtrProviderContext) => {
 
         runner.test('will return 2 results if we have a list that includes 2 text', async () => {
           const filename = await importFile(supertest, log, 'text', ['one', 'three']);
-          const rule = getRuleForSignalTesting(['text_no_spaces']);
+          const rule = getRuleForSignalTesting(['text_no_spaces'], '');
           const { id } = await createRuleWithExceptionEntries(supertest, log, rule, [
             [
               {
@@ -609,7 +609,7 @@ export default ({ getService }: FtrProviderContext) => {
             'three',
             'four',
           ]);
-          const rule = getRuleForSignalTesting(['text_no_spaces']);
+          const rule = getRuleForSignalTesting(['text_no_spaces'], '');
           const { id } = await createRuleWithExceptionEntries(supertest, log, rule, [
             [
               {
@@ -746,7 +746,7 @@ export default ({ getService }: FtrProviderContext) => {
 
         runner.test('will return 1 result if we have a list that excludes 1 text', async () => {
           const filename = await importTextFile(supertest, log, 'text', ['one']);
-          const rule = getRuleForSignalTesting(['text_no_spaces']);
+          const rule = getRuleForSignalTesting(['text_no_spaces'], '');
           const { id } = await createRuleWithExceptionEntries(supertest, log, rule, [
             [
               {
@@ -769,7 +769,7 @@ export default ({ getService }: FtrProviderContext) => {
 
         runner.test('will return 2 results if we have a list that excludes 2 text', async () => {
           const filename = await importTextFile(supertest, log, 'text', ['one', 'three']);
-          const rule = getRuleForSignalTesting(['text_no_spaces']);
+          const rule = getRuleForSignalTesting(['text_no_spaces'], '');
           const { id } = await createRuleWithExceptionEntries(supertest, log, rule, [
             [
               {
@@ -797,7 +797,7 @@ export default ({ getService }: FtrProviderContext) => {
             'three',
             'four',
           ]);
-          const rule = getRuleForSignalTesting(['text_no_spaces']);
+          const rule = getRuleForSignalTesting(['text_no_spaces'], '');
           const { id } = await createRuleWithExceptionEntries(supertest, log, rule, [
             [
               {