diff --git a/src/test/java/org/opensearch/securityanalytics/alerts/AlertsIT.java b/src/test/java/org/opensearch/securityanalytics/alerts/AlertsIT.java
index fe97a13be..4b8f983e3 100644
--- a/src/test/java/org/opensearch/securityanalytics/alerts/AlertsIT.java
+++ b/src/test/java/org/opensearch/securityanalytics/alerts/AlertsIT.java
@@ -956,7 +956,7 @@ public void testMultipleAggregationAndDocRules_alertSuccess() throws IOException
         getAlertsResponse = makeRequest(client(), "GET", SecurityAnalyticsPlugin.ALERTS_BASE_URI, params1, null);
         getAlertsBody = asMap(getAlertsResponse);
         // TODO enable asserts here when able
-        Assert.assertEquals(2, getAlertsBody.get("total_alerts"));
+        Assert.assertEquals(1, getAlertsBody.get("total_alerts"));
     }
 
     @Ignore