I'm experiencing an issue while trying to create Sentinel solution through bicep file deployment.
// azure sentinel
// workspace creation
param location string = resourceGroup().location
resource workspace 'Microsoft.OperationalInsights/workspaces@2022-10-01' = {
name: 'ul-sda-np-alaw-cae-002'
location: location
properties:{
sku:{
name:'PerGB2018'
}
retentionInDays:180
}
}
// azure sentinel resource creation
resource sentinel 'Microsoft.OperationsManagement/solutions@2015-11-01-preview' ={
name: 'SecurityInsights (${workspace.name})'
location: location
properties:{
workspaceResourceId: workspace.id
}
plan:{
name: 'SecurityInsights (${workspace.name})'
// product: 'OMSGallery/SecurityInsights'
product: 'OMSGallery/SecurityInsights'
// product: 'ASI/SecurityInsights (${workspace.name})'
promotionCode:''
publisher:'Microsoft'
}
}
I'm able to create the workspace through this bicep template file, but it fails to create Ms-Sentinel solution
here is the error message:
{"code":"DeploymentFailed","target":"/subscriptions/26b7dd8a-9ac1-4fb0-888c-f7d881e1a6f4/resourceGroups/ul-sda-np-alaw-cae-002/providers/Microsoft.Resources/deployments/main","message":"At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-deployment-operations for usage details.","details":[{"code":"InvalidParameter","target":"plan.product","message":"Solution product name cannot start with 'OMSGallery/' as it is reserved for Microsoft first party solutions. Operation Id: '965a4016a45243c7def60b44c70698c5'"}]}