delete investigation_fields from tests

SigmaHQ · Oct 25, 2024 · 5f26d2e · 5f26d2e
1 parent 8e1f505
commit 5f26d2e
Showing 1 changed file with 0 additions and 2 deletions.
diff --git a/tests/test_backend_elasticsearch_esql.py b/tests/test_backend_elasticsearch_esql.py
@@ -544,7 +544,6 @@ def test_elasticsearch_esql_siemrule_ndjson(esql_backend: ESQLBackend):
         'meta': {
             'from': '1m'
         },
-        'investigation_fields': {},
         'author': [],
         'false_positives': [],
         'from': 'now-5m',
@@ -606,7 +605,6 @@ def test_elasticsearch_esql_siemrule_ndjson_with_threat(esql_backend: ESQLBacken
         "meta": {
             "from": "1m"
         },
-        "investigation_fields": {},
         "author": [],
         "false_positives": [],
         "from": "now-5m",