Azure-Sentinel icon indicating copy to clipboard operation
Azure-Sentinel copied to clipboard

Analytic Rule "requiredDataConnectors" property should be [] in maintemplate and handle ARM-TTK Error

Open v-amolpatil opened this issue 2 years ago • 0 comments

Required items, please complete

Change(s):

  • For analytic rules we are changing "requiredDataConnectors" value if [] in source then in maintemplate also it should come as [] without making use of json[].
  • Also, added skip validation for armttk in Github pipeline to skip if we get "Template should not contain blanks" error for "requiredDataConnectors" property.

Reason for Change(s):

  • Specified above

Version Updated:

  • NA

Testing Completed:

  • Yes

Checked that the validations are passing and have addressed any issues that are present:

  • Yes

Maintemplate for Apache Log4j Vulnerability Detection solution has source file "requiredDataConnectors" value as [] which is the expected output as shown below: image

Tested on private repo and below is the output where "requiredDataConnectors" property is [] but it will not fail eventhough its [] as we have handled it. In below image line 81 is pointing to property "triggerOperator" which is [] which is correct image

When we fix above line 81 then we will see success screen like below: image

v-amolpatil avatar Jan 19 '24 04:01 v-amolpatil