New entity mapping issues (Alert enrichment)

Copper Contributor

Hello,

I use new entities mapping in analytic rules, I exported some to .json files and I see in code information about entities mapping. When I upload these .json files to another tenant, the Analytic Rule is created but entities mapping were not applied, there is an empty section in Alert enrichment (Preview). Do you have a similar problem?

2 Replies
*BIG BUMP*

Any luck with resolving this issue? I just bumped into it and overly disappointed seems a bit light.
I would guess Pawel's issue was due to different API versions being used in the code (the upload probably didn't know about entities). Dustin, what is the issue you are seeing? Did you also download a rule and when uploading it, you don't see the entity mappings?