diff --git a/x-pack/plugins/security_solution/common/endpoint/data_loaders/index_endpoint_rule_alerts.ts b/x-pack/plugins/security_solution/common/endpoint/data_loaders/index_endpoint_rule_alerts.ts
index 1c5883c052135..f6a394e8c46c9 100644
--- a/x-pack/plugins/security_solution/common/endpoint/data_loaders/index_endpoint_rule_alerts.ts
+++ b/x-pack/plugins/security_solution/common/endpoint/data_loaders/index_endpoint_rule_alerts.ts
@@ -127,14 +127,17 @@ const ensureEndpointRuleAlertsIndexExists = async (esClient: Client): Promise<vo
     indexMappings.mappings._meta.kibana.version = kibanaPackageJson.version;
   }
 
+  const doesIndexExist = await esClient.indices.exists({ index: indexMappings.index });
+
+  if (doesIndexExist) {
+    return;
+  }
   try {
     await esClient.indices.create({
       index: indexMappings.index,
-      body: {
-        settings: indexMappings.settings,
-        mappings: indexMappings.mappings,
-        aliases: indexMappings.aliases,
-      },
+      settings: indexMappings.settings,
+      mappings: indexMappings.mappings,
+      aliases: indexMappings.aliases,
     });
   } catch (error) {
     // ignore error that indicate index is already created
diff --git a/x-pack/test/security_solution_endpoint/apps/endpoint/responder.ts b/x-pack/test/security_solution_endpoint/apps/endpoint/responder.ts
index dc2183d6f0fee..5a0f0fdf93ec1 100644
--- a/x-pack/test/security_solution_endpoint/apps/endpoint/responder.ts
+++ b/x-pack/test/security_solution_endpoint/apps/endpoint/responder.ts
@@ -182,6 +182,11 @@ export default ({ getPageObjects, getService }: FtrProviderContext) => {
         // Show event/alert details for the first one in the list
         await pageObjects.timeline.showEventDetails();
 
+        // TODO: The index already exists error toast should not show up
+        // close and dismiss it if it does
+        if (await testSubjects.exists('globalToastList')) {
+          await testSubjects.click('toastCloseButton');
+        }
         // Click responder from the take action button
         await testSubjects.click('take-action-dropdown-btn');
         await testSubjects.clickWhenNotDisabled('endpointResponseActions-action-item');