diff --git a/src/test/java/org/opensearch/securityanalytics/resthandler/DetectorMonitorRestApiIT.java b/src/test/java/org/opensearch/securityanalytics/resthandler/DetectorMonitorRestApiIT.java
index a3880ceb2..50f2bf889 100644
--- a/src/test/java/org/opensearch/securityanalytics/resthandler/DetectorMonitorRestApiIT.java
+++ b/src/test/java/org/opensearch/securityanalytics/resthandler/DetectorMonitorRestApiIT.java
@@ -1121,7 +1121,7 @@ public void testCreateDetectorWithThreatIntelEnabled_updateDetectorWithThreatInt
         List<String> iocs = getThreatIntelFeedIocs(3);
         int i=1;
         for (String ioc : iocs) {
-            indexDoc(index, i+"", randomDoc(5, 3, i==1? "120.85.114.146" : "120.86.237.94"));
+            indexDoc(index, i+"", randomDocWithIpIoc(5, 3, i==1? "120.85.114.146" : "120.86.237.94"));
             i++;
         }
         String workflowId = ((List<String>) detectorMap.get("workflow_ids")).get(0);