Skip to content

Manually ASIM Deployment - Failed to validate, Conflict #8623

Open

Description

Describe the bug
Upon trying to deploy ASIM parsers via the 'Deploy to Azure' button and filling out the required parameters, a 'Conflict' error appears with the following error: (workspace, location and resource group have been omitted)

The resource '<SENTINELWORKSPACE> already exists in location <LOCATION> in resource group <RESOURCEGROUP>. A resource with the same name cannot be created in location <LOCATION>. Please select a new resource name.

Upon giving it a different name, it creates a new LAW in the designated resource group.

To Reproduce
Steps to reproduce the behavior:

  1. Go to list of parsers https://github.com/Azure/Azure-Sentinel/tree/master/ASIM
  2. Deploy any of them
  3. Fill out the workspace name in the 'Workspace' field and pick the correct resource group containing the LAW
  4. Deploy

Expected behavior
The parsers should deploy into the targeted workspace and become available for query.

Screenshots
image

Desktop (please complete the following information):

  • OS: Windows 11
  • Browser: Edge
  • Version: 115

Additional context
I have all required permissions to deploy this content.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions