Forum Discussion

Pawel_Giza's avatar
Pawel_Giza
Copper Contributor
Apr 22, 2021

New entity mapping issues (Alert enrichment)

Hello,

I use new entities mapping in analytic rules, I exported some to .json files and I see in code information about entities mapping. When I upload these .json files to another tenant, the Analytic Rule is created but entities mapping were not applied, there is an empty section in Alert enrichment (Preview). Do you have a similar problem?

  • DustinGlover's avatar
    DustinGlover
    Copper Contributor
    Apr 05, 2023
    *BIG BUMP*

    Any luck with resolving this issue? I just bumped into it and overly disappointed seems a bit light.
    • GBushey's avatar
      GBushey
      Icon for Microsoft rankMicrosoft
      Apr 17, 2023
      I would guess Pawel's issue was due to different API versions being used in the code (the upload probably didn't know about entities). Dustin, what is the issue you are seeing? Did you also download a rule and when uploading it, you don't see the entity mappings?

Resources