Azure-Sentinel
Azure-Sentinel copied to clipboard
Analytic Rule "requiredDataConnectors" property should be [] in maintemplate and handle ARM-TTK Error
Required items, please complete
Change(s):
- For analytic rules we are changing "requiredDataConnectors" value if [] in source then in maintemplate also it should come as [] without making use of json[].
- Also, added skip validation for armttk in Github pipeline to skip if we get "Template should not contain blanks" error for "requiredDataConnectors" property.
Reason for Change(s):
- Specified above
Version Updated:
- NA
Testing Completed:
- Yes
Checked that the validations are passing and have addressed any issues that are present:
- Yes
Maintemplate for Apache Log4j Vulnerability Detection solution has source file "requiredDataConnectors" value as [] which is the expected output as shown below:
Tested on private repo and below is the output where "requiredDataConnectors" property is [] but it will not fail eventhough its [] as we have handled it. In below image line 81 is pointing to property "triggerOperator" which is [] which is correct
When we fix above line 81 then we will see success screen like below: