Testing to run system tests using Elastic Agent docker images based on Wolfi images #10933, raised the issue that system tests are failing for system_audit package.

The error that comes from the buildkite build are that elastic-package could not find hits in the data stream:

test case failed: could not find hits in logs-system_audit.package-86982 data stream

This package has already defined the root permissions in their manifest, but it still does not ingest any docs in Elasticsearch.

Is this package using this beat https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-dataset-system-package.html ? If that is the case, Wolfi images use apk as its package manager and it would not be supported.

Should this package be using the Elastic Agent docker image based on Ubuntu to run the system tests? @elastic/sec-linux-platform