[CI] MultiClusterSpecIT test {ip.ToIpInSort} failing

[elasticsearchmachine]

Build Scans:

• elasticsearch-periodic #8905 / 8.13.4_bwc
• elasticsearch-periodic #8893 / 8.13.4_bwc
• elasticsearch-periodic #8887 / 8.13.4_bwc
• elasticsearch-periodic #8881 / 8.13.4_bwc
• elasticsearch-periodic #8869 / 8.13.4_bwc

Reproduction Line:

./gradlew ":x-pack:plugin:esql:qa:server:multi-clusters:v8.13.4#oldToNew" -Dtests.class="org.elasticsearch.xpack.esql.ccq.MultiClusterSpecIT" -Dtests.method="test {ip.ToIpInSort}" -Dtests.seed=81179A2E2D6394A5 -Dtests.bwc=true -Dtests.locale=mdf-RU -Dtests.timezone=America/Kentucky/Louisville -Druntime.java=24

Applicable branches:
8.19

Reproduces locally?:
N/A

Failure History:
See dashboard

Failure Message:

org.elasticsearch.client.ResponseException: method [POST], host [http://[::1]:36939], URI [/_query?pretty=true&error_trace=true], status line [HTTP/1.1 500 Internal Server Error]
Warnings: [No limit defined, adding default limit of [1000]]
{
  "error" : {
    "root_cause" : [
      {
        "type" : "esql_illegal_argument_exception",
        "reason" : "order by expression must be an attribute",
        "stack_trace" : "org.elasticsearch.xpack.esql.EsqlIllegalArgumentException: order by expression must be an attribute\n\tat org.elasticsearch.xpack.esql.planner.LocalExecutionPlanner.lambda$planTopN$2(LocalExecutionPlanner.java:358)\n\tat java.base/java.util.stream.ReferencePipeline$3$1.accept(ReferencePipeline.java:197)\n\tat java.base/java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1708)\n\tat java.base/java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:509)\n\tat java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:4
[truncated]

Issue Reasons:

• [8.19] 5 failures in test test {ip.ToIpInSort} (1.1% fail rate in 452 executions)
• [8.19] 5 failures in step 8.13.4_bwc (71.4% fail rate in 7 executions)
• [8.19] 5 failures in pipeline elasticsearch-periodic (71.4% fail rate in 7 executions)

Note:
This issue was created using new test triage automation. Please report issues or feedback to es-delivery.

[elasticsearchmachine]

Pinging @elastic/es-analytical-engine (Team:Analytics)