diff --git a/x-pack/test/security_solution_cypress/cypress/e2e/explore/host_details/risk_tab.cy.ts b/x-pack/test/security_solution_cypress/cypress/e2e/explore/host_details/risk_tab.cy.ts
index ea8362ee17541a..a6a9bc405c9e37 100644
--- a/x-pack/test/security_solution_cypress/cypress/e2e/explore/host_details/risk_tab.cy.ts
+++ b/x-pack/test/security_solution_cypress/cypress/e2e/explore/host_details/risk_tab.cy.ts
@@ -16,7 +16,7 @@ import { ALERTS_COUNT, ALERT_GRID_CELL } from '../../../screens/alerts';
 import { RISK_INFORMATION_FLYOUT_HEADER } from '../../../screens/entity_analytics';
 import { navigateToHostRiskDetailTab } from '../../../tasks/host_risk';
 
-describe('risk tab', { tags: ['@ess', '@serverless', '@brokenInServerless'] }, () => {
+describe('risk tab', { tags: ['@ess', '@serverless'] }, () => {
   // FLAKY: https://github.com/elastic/kibana/issues/169033
   // FLAKY: https://github.com/elastic/kibana/issues/169034
   describe.skip('with legacy risk score', () => {
@@ -62,7 +62,7 @@ describe('risk tab', { tags: ['@ess', '@serverless', '@brokenInServerless'] }, (
     before(() => {
       cleanKibana();
       cy.task('esArchiverLoad', { archiveName: 'risk_scores_new' });
-      cy.task('esArchiverLoad', { archiveName: 'query_alert' });
+      cy.task('esArchiverLoad', { archiveName: 'query_alert', useCreate: true, docsOnly: true });
       login();
       enableRiskEngine();
     });
diff --git a/x-pack/test/security_solution_cypress/es_archives/query_alert/mappings.json b/x-pack/test/security_solution_cypress/es_archives/query_alert/mappings.json
index f346eee132104c..db86f3afb7c2ba 100644
--- a/x-pack/test/security_solution_cypress/es_archives/query_alert/mappings.json
+++ b/x-pack/test/security_solution_cypress/es_archives/query_alert/mappings.json
@@ -7887,10 +7887,6 @@
       "index": {
         "auto_expand_replicas": "0-1",
         "hidden": "true",
-        "lifecycle": {
-          "name": ".alerts-ilm-policy",
-          "rollover_alias": ".alerts-security.alerts-default"
-        },
         "mapping": {
           "total_fields": {
             "limit": "2500"