[7.9] [Security Solution] [Detections] Revert "[Security Solution] [Detections] Fixes bug for determining when we hit max signals after filtering with lists (#71768)" (#71956)

[dhurley14]

Backports the following commits to 7.9:

• [Security Solution] [Detections] Revert "[Security Solution] [Detections] Fixes bug for determining when we hit max signals after filtering with lists ([Security Solution] [Detections] Fixes bug for determining when we hit max signals after filtering with lists #71768)" ([Security Solution] [Detections] Revert "[Security Solution] [Detections] Fixes bug for determining when we hit max signals after filtering with lists (#71768)" #71956)

[kibanamachine]

💛 Build succeeded, but was flaky

• continuous-integration/kibana-ci/pull-request
• Commit: 419e107
• Flaky suites:
  • xpack-kibana-ciGroup6

---

Test Failures

Kibana Pipeline / kibana-xpack-agent / X-Pack API Integration Tests.x-pack/test/api_integration/apis/fleet/agents/enroll·ts.apis Fleet Endpoints fleet_agents_enroll "before all" hook for "should not allow to enroll an agent with a invalid enrollment"

Link to Jenkins

Standard Out

Failed Tests Reporter:
  - Test has not failed recently on tracked branches

[00:00:00]       │
[00:00:00]         └-: apis
[00:00:00]           └-> "before all" hook
[00:08:18]           └-: Fleet Endpoints
[00:08:18]             └-> "before all" hook
[00:08:54]             └-: fleet_agents_enroll
[00:08:54]               └-> "before all" hook
[00:08:54]               └-> "before all" hook
[00:08:54]                 │ info [fleet/agents] Loading "mappings.json"
[00:08:54]                 │ info [fleet/agents] Loading "data.json"
[00:08:54]                 │ info [o.e.c.m.MetadataDeleteIndexService] [kibana-ci-immutable-ubuntu-18-tests-xl-1594855221211107289] [.kibana_2/vJJ88GfIQp27c0wA_tEoWw] deleting index
[00:08:54]                 │ info [o.e.c.m.MetadataDeleteIndexService] [kibana-ci-immutable-ubuntu-18-tests-xl-1594855221211107289] [.kibana_1/E3XBNLMKR2WF-pxbMkDFlg] deleting index
[00:08:54]                 │ info [fleet/agents] Deleted existing index [".kibana_2",".kibana_1"]
[00:08:54]                 │ info [o.e.c.m.MetadataCreateIndexService] [kibana-ci-immutable-ubuntu-18-tests-xl-1594855221211107289] [.kibana] creating index, cause [auto(bulk api)], templates [], shards [1]/[1]
[00:08:54]                 └- ✖ fail: apis Fleet Endpoints fleet_agents_enroll "before all" hook for "should not allow to enroll an agent with a invalid enrollment"
[00:08:54]                 │      Error: [invalid_alias_name_exception] Invalid alias name [.kibana], an index exists with the same name as the alias, with { index_uuid="PcT5nRLUQb2hpTSp1sIVPQ" & index=".kibana" }
[00:08:54]                 │       at respond (/dev/shm/workspace/kibana/node_modules/elasticsearch/src/lib/transport.js:349:15)
[00:08:54]                 │       at checkRespForFailure (/dev/shm/workspace/kibana/node_modules/elasticsearch/src/lib/transport.js:306:7)
[00:08:54]                 │       at HttpConnector.<anonymous> (/dev/shm/workspace/kibana/node_modules/elasticsearch/src/lib/connectors/http.js:173:7)
[00:08:54]                 │       at IncomingMessage.wrapper (/dev/shm/workspace/kibana/node_modules/lodash/lodash.js:4929:19)
[00:08:54]                 │       at endReadableNT (_stream_readable.js:1145:12)
[00:08:54]                 │       at process._tickCallback (internal/process/next_tick.js:63:19)
[00:08:54]                 │ 
[00:08:54]                 │ 

Stack Trace

{ Error: [invalid_alias_name_exception] Invalid alias name [.kibana], an index exists with the same name as the alias, with { index_uuid="PcT5nRLUQb2hpTSp1sIVPQ" & index=".kibana" }
    at respond (/dev/shm/workspace/kibana/node_modules/elasticsearch/src/lib/transport.js:349:15)
    at checkRespForFailure (/dev/shm/workspace/kibana/node_modules/elasticsearch/src/lib/transport.js:306:7)
    at HttpConnector.<anonymous> (/dev/shm/workspace/kibana/node_modules/elasticsearch/src/lib/connectors/http.js:173:7)
    at IncomingMessage.wrapper (/dev/shm/workspace/kibana/node_modules/lodash/lodash.js:4929:19)
    at endReadableNT (_stream_readable.js:1145:12)
    at process._tickCallback (internal/process/next_tick.js:63:19)
  status: 400,
  displayName: 'BadRequest',
  message:
   '[invalid_alias_name_exception] Invalid alias name [.kibana], an index exists with the same name as the alias, with { index_uuid="PcT5nRLUQb2hpTSp1sIVPQ" & index=".kibana" }',
  path: '/.kibana_1',
  query: { include_type_name: false },
  body:
   { error:
      { root_cause: [Array],
        type: 'invalid_alias_name_exception',
        reason:
         'Invalid alias name [.kibana], an index exists with the same name as the alias',
        index_uuid: 'PcT5nRLUQb2hpTSp1sIVPQ',
        index: '.kibana' },
     status: 400 },
  statusCode: 400,
  response:
   '{"error":{"root_cause":[{"type":"invalid_alias_name_exception","reason":"Invalid alias name [.kibana], an index exists with the same name as the alias","index_uuid":"PcT5nRLUQb2hpTSp1sIVPQ","index":".kibana"}],"type":"invalid_alias_name_exception","reason":"Invalid alias name [.kibana], an index exists with the same name as the alias","index_uuid":"PcT5nRLUQb2hpTSp1sIVPQ","index":".kibana"},"status":400}',
  toString: [Function],
  toJSON: [Function] }

---

Build metrics

✅ unchanged

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream