From 7717e90b4ee88a77029946116269f05e3a37c13c Mon Sep 17 00:00:00 2001
From: Kevin Qualters <56408403+kqualters-elastic@users.noreply.github.com>
Date: Mon, 25 Jul 2022 20:16:01 -0400
Subject: [PATCH] Fix typo in events of type analyzer query (#137127)

---
 .../public/resolver/data_access_layer/factory.ts              | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/x-pack/plugins/security_solution/public/resolver/data_access_layer/factory.ts b/x-pack/plugins/security_solution/public/resolver/data_access_layer/factory.ts
index 644f644b507a12..2c145c180bbded 100644
--- a/x-pack/plugins/security_solution/public/resolver/data_access_layer/factory.ts
+++ b/x-pack/plugins/security_solution/public/resolver/data_access_layer/factory.ts
@@ -93,7 +93,7 @@ export function dataAccessLayerFactory(
         return context.services.http.post('/api/endpoint/resolver/events', {
           query: commonFields.query,
           body: JSON.stringify({
-            ...commonFields,
+            ...commonFields.body,
             entityType: 'alerts',
             eventID: entityID,
           }),
@@ -102,7 +102,7 @@ export function dataAccessLayerFactory(
         return context.services.http.post('/api/endpoint/resolver/events', {
           query: commonFields.query,
           body: JSON.stringify({
-            ...commonFields,
+            ...commonFields.body,
             filter: JSON.stringify({
               bool: {
                 filter: [