Unable to delete Threat Intelligence Upload Indicators API (Preview) dataconnector

[hakfo]

Describe the bug We are unable to delete the Threat Intelligence Upload Indicators API (Preview) dataconnector

It says we need to disconnect the dataconnector, but there is no disconnect button.

To Reproduce Steps to reproduce the behavior:

1. Go to the dataconnector
2. Press delete

[v-rusraut]

Hi @hakfo, Thanks for flagging this issue, we will investigate this issue and get back to you with some updates by 03-05-2024. Thanks!

[hakfo]

@v-rusraut is there any update regarding this issue?

[v-rusraut]

Hi @hakfo, We updated query of connectivityCriterias,So to unblock you from this issue could you please custom deploy the Solution MainTemplate and check whether your issue get resolved. Sharing the MainTemplate and Custom deployment steps- Custom Deployment - CustomDeploymentoftheSolution.docx Main template: -mainTemplate.json After Custom deployement, connector will disconnect, then you can delete this data connector. Thanks

[hakfo]

Hi @v-rusraut.

I tried your solution of deploying the custom deployment. Unfortunately even after waiting several hours (even overnight), it still does not disconnect. Is there another fix we could try?

[ThePeteStore]

Doesn't look like the template works either as I get the following error:

{"code":"InvalidTemplate","message":"Deployment template validation failed: 'The template resource '/Microsoft.SecurityInsights/-dc-c6disteyi7k44' for type 'Microsoft.OperationalInsights/workspaces/providers/contentTemplates' at line '455' and column '87' has incorrect segment lengths. A nested resource type must have identical number of segments as its resource name. A root resource type must have segment length one greater than its resource name. Please see https://aka.ms/arm-syntax-resources for usage details.'."}

[v-rusraut]

Hi @ThePeteStore,

Please verify that you provided correct value in below places like workspace,Region etc

Thanks

[v-rusraut]

Hi @hakfo, Please confirm that still you are continuously getting log from this connector. Thanks

[ThePeteStore]

I can confirm that we are still ingesting data after successfully running the script above

[v-rusraut]

I can confirm that we are still ingesting data after successfully running the script above

Are you able to deploy mainTemplate now ?

[v-rusraut]

Hi @hakfo, Please confirm that still you are continuously getting log from this connector. Thanks

Please confirm on this.

[hakfo]

@v-rusraut I can also confirm that we are still ingesting data. It is still not possible to delete.

[ThePeteStore]

@v-rusraut Yes, we deployed the mainTemplate the day of your suggestion and we are still ingesting data.

[v-rusraut]

Hi @hakfo, We are working with respective team, we will update you.

[hakfo]

@v-rusraut are there any further updates regarding this issue?

[v-rusraut]

Hi @hakfo, Still we are working with respective team, we will update you. Thaks

[v-rusraut]

Hi @hakfo, We got response from respective team that, this is known UX bug, and they will fix this issue till end of June, so currently closing this issue, feel free to re-open it any time. Thank you for your co-operation.

[hakfo]

Hi @v-rusraut im just checking in to check with you if you have any confirmation from the respective team that this issue has been solved. Have they solved it yet?

[CJWNom]

Hi @v-rusraut @v-sudkharat is there any update on this? We are also experiencing the same issue. No logs ingested by this connector in over 3 days, yet it's still 'connected' and unable to be deleted.