You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
`WARNING: Unable to find LogicApp playbook01 under Subscription Id: (redacted)
Import-AzSentinelAlertRule: Unable to invoke webrequest for rule AlertRule01 with error message: Unable to create Action for Rule: with Playbook playbook01 Error: Response status code does not indicate success: 400 (Bad Request).
WARNING: "AlertRule02" configuration is not following the official API schema, consider updating the incident and grouping configuration.
Import-AzSentinelAlertRule: Unable to invoke webrequest for rule AlertRule02 with error message: Response status code does not indicate success: 400 (Bad Request).
WARNING: "AlertRule03" configuration is not following the official API schema, consider updating the incident and grouping configuration.`
Expected behavior
Exception thrown at the first invalid rule
Actual behavior
Rules import continues regardless
Rules actually appear in console, despite errors shown on output
I'm unsure if we have nothing actually wrong with the rule definitions in this repos' sample file, and a bug in the import commandlet here, and/or an issue with raising exceptions.
Thanks
The text was updated successfully, but these errors were encountered:
Environment
Windows build number: Microsoft Windows [Version 10.0.22000.795]
PowerShell version 7,2,5
Steps to reproduce
Import-AzSentinelAlertRule -SettingsFile .\alertrules.json -WorkspaceName "foo"
`WARNING: Unable to find LogicApp playbook01 under Subscription Id: (redacted)
Import-AzSentinelAlertRule: Unable to invoke webrequest for rule AlertRule01 with error message: Unable to create Action for Rule: with Playbook playbook01 Error: Response status code does not indicate success: 400 (Bad Request).
WARNING: "AlertRule02" configuration is not following the official API schema, consider updating the incident and grouping configuration.
Import-AzSentinelAlertRule: Unable to invoke webrequest for rule AlertRule02 with error message: Response status code does not indicate success: 400 (Bad Request).
WARNING: "AlertRule03" configuration is not following the official API schema, consider updating the incident and grouping configuration.`
Expected behavior
Exception thrown at the first invalid rule
Actual behavior
I'm unsure if we have nothing actually wrong with the rule definitions in this repos' sample file, and a bug in the import commandlet here, and/or an issue with raising exceptions.
Thanks
The text was updated successfully, but these errors were encountered: