Open
Description
openedon Jul 25, 2023
Describe the bug
Upon trying to deploy ASIM parsers via the 'Deploy to Azure' button and filling out the required parameters, a 'Conflict' error appears with the following error: (workspace, location and resource group have been omitted)
The resource '<SENTINELWORKSPACE> already exists in location <LOCATION> in resource group <RESOURCEGROUP>. A resource with the same name cannot be created in location <LOCATION>. Please select a new resource name.
Upon giving it a different name, it creates a new LAW in the designated resource group.
To Reproduce
Steps to reproduce the behavior:
- Go to list of parsers https://github.com/Azure/Azure-Sentinel/tree/master/ASIM
- Deploy any of them
- Fill out the workspace name in the 'Workspace' field and pick the correct resource group containing the LAW
- Deploy
Expected behavior
The parsers should deploy into the targeted workspace and become available for query.
Desktop (please complete the following information):
- OS: Windows 11
- Browser: Edge
- Version: 115
Additional context
I have all required permissions to deploy this content.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment