Content failed to deploy

[ProGHAzure]

Hi All,

Content wont deploy? fork is fully updated but fails everytime!

Validating inputs Module Az latest installed from hostedAgentFolder Initializing Az Module "C:\Program Files\PowerShell\7\pwsh.exe" -NoLogo -NoProfile -NonInteractive -Command Test-Path (Join-Path C:\Modules az_) "C:\Program Files\PowerShell\7\pwsh.exe" -NoLogo -NoProfile -NonInteractive -Command $env:PSModulePath C:\Users\runneradmin\Documents\PowerShell\Modules;C:\Program Files\PowerShell\Modules;c:\program files\powershell\7\Modules;C:\Modules\azurerm_2.1.0;C:\Modules\azure_2.1.0;C:\Users\packer\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\Windows\system32\WindowsPowerShell\v1.0\Modules;C:\Program Files\Microsoft SQL Server\130\Tools\PowerShell\Modules
"C:\Program Files\PowerShell\7\pwsh.exe" -NoLogo -NoProfile -NonInteractive -Command "try *** $ErrorActionPreference = "Stop" $WarningPreference = "SilentlyContinue" $output = @** $data = Get-Module -Name Az -ListAvailable | Sort-Object Version -Descending | Select-Object -First 1 $output['AzVersion'] = $data.Version.ToString() $output['Success'] = "true" *** catch *** $output['Error'] = $_.exception.Message *** return ConvertTo-Json $output" True

---

"Success": "true", "AzVersion": "9.3.0"

---

"C:\Program Files\PowerShell\7\pwsh.exe" -NoLogo -NoProfile -NonInteractive -Command $env:PSModulePath C:\Modules;C:\Users\runneradmin\Documents\PowerShell\Modules;C:\Program Files\PowerShell\Modules;c:\program files\powershell\7\Modules;C:\Modules\azurerm_2.1.0;C:\Modules\azure_2.1.0;C:\Users\packer\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\Windows\system32\WindowsPowerShell\v1.0\Modules;C:\Program Files\Microsoft SQL Server\130\Tools\PowerShell\Modules
Initializing Az Module Complete Running Az PowerShell Script "C:\Program Files\PowerShell\7\pwsh.exe" -NoLogo -NoProfile -NonInteractive -Command D:\a_temp[27](https://github.com/ProGHAzure/Sentinel/actions/runs/7728473583/job/21069333760#step:11:28)2d0292-948b-4c40-9e9c-5c37af507fb8.ps1 [Info] load the deployment configuration from [D:\a\Sentinel\Sentinel\sentinel-deployment.config] Starting Deployment for Files in path: D:\a\Sentinel\Sentinel [Info] Try to deploy D:\a\Sentinel\Sentinel.script\SolutionValidations\ValidDomainsVerticals.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\SolutionValidations\ValidDomainsVerticals.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\Agari\invalidAzureFunctionConnectorPermissions.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\Agari\invalidAzureFunctionConnectorPermissions.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\Agari\validAzureFunctionConnectorPermissions.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\Agari\validAzureFunctionConnectorPermissions.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\Agari\validAzureFunctionDataConnector.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\Agari\validAzureFunctionDataConnector.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\Templates\Connector_REST_API_template.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\Templates\Connector_REST_API_template.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\invalidAzureDiagnosticsDataConnector.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\invalidAzureDiagnosticsDataConnector.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\invalidAzureFunctionConnectorPermissions.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\invalidAzureFunctionConnectorPermissions.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\invalidCEFConnectorPermissions.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\invalidCEFConnectorPermissions.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\invalidSyslogConnectorPermissions.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\invalidSyslogConnectorPermissions.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\missingAdditionalRequirementBanner.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\missingAdditionalRequirementBanner.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\missingIdAndConnectivityCriteria.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\missingIdAndConnectivityCriteria.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\missingPublisherProperty.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\missingPublisherProperty.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\spaceIn DataConnector FileName.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\spaceIn DataConnector FileName.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\spaceInDataConnectorDataType.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\spaceInDataConnectorDataType.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\spaceInDataConnectorId.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\spaceInDataConnectorId.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\validAzureDiagnosticsDataConnector.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\validAzureDiagnosticsDataConnector.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\validCEFConnectorPermissions.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\validCEFConnectorPermissions.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\validCEFDataConnector.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\validCEFDataConnector.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\validRestApiDataConnector.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\validRestApiDataConnector.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\validSyslogConnectorDataSourcesPermissions.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\validSyslogConnectorDataSourcesPermissions.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\validSyslogConnectorPermissions.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\validSyslogConnectorPermissions.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\validSyslogDataConnector.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\dataConnectorValidatorTest\testFiles\validSyslogDataConnector.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\detectionTemplateSchemaValidation\SkipConnectorIdsValidationsTemplates.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\detectionTemplateSchemaValidation\SkipConnectorIdsValidationsTemplates.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\detectionTemplateSchemaValidation\SkipStrcutreValidationsTemplates.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\detectionTemplateSchemaValidation\SkipStrcutreValidationsTemplates.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\detectionTemplateSchemaValidation\ValidConnectorIds.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\detectionTemplateSchemaValidation\ValidConnectorIds.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\idChangeValidatorTest\SkipIdValidationsTemplates.json Error: Failed to check valid resource type. Warning: Skipping deployment for D:\a\Sentinel\Sentinel.script\tests\idChangeValidatorTest\SkipIdValidationsTemplates.json. The file contains resources for content that was not selected for deployment. Please add content type to connection if you want this file to be deployed. [Info] Try to deploy D:\a\Sentinel\Sentinel.script\tests\jsonFileValidatorTest\invalidFile.json ConvertFrom-Json: D:\a\Sentinel\Sentinel.github\workflows\azure-sentinel-deploy-cc788f67-63ce-42ee-b831-1afb617ba380.ps1:489 Line | 489 | … $templateObject = Get-Content $path | Out-String | ConvertFrom-Json | ~~~~~~~~~~~~~~~~ | Conversion from JSON failed with error: Unterminated string. Expected delimiter: ". Path 'testInvalidYamlFile', | line 5, position 0. Error: Error: The process 'C:\Program Files\PowerShell\7\pwsh.exe' failed with exit code 1

[github-actions[bot]]

Thank you for submitting an Issue to the Azure Sentinel GitHub repo! You should expect an initial response to your Issue from the team within 5 business days. Note that this response may be delayed during holiday periods. For urgent, production-affecting issues please raise a support ticket via the Azure Portal.

[v-sudkharat]

Hi @ProGHAzure, Thanks for flagging this issue, could you please share more details with us link in which solution or content you are getting issue. Thanks!

[ProGHAzure]

Hi,

Thanks alot, this is the Azure\Sentinel forked to our repository, linked into Sentinel. it fails deployment every time, this is the out of the box fork from the master branch of Azure\Sentinel public

Error code is:

| Conversion from JSON failed with error: Unterminated string. Expected delimiter: ". Path 'testInvalidYamlFile', | line 5, position 0. Error: Error: The process 'C:\Program Files\PowerShell\7\pwsh.exe' failed with exit code 1

[v-sudkharat]

@ProGHAzure, thank you for response, we will check on this and get back to you by - 06-02-2024. In addition, could you please share your mail id with us, so if required we can connect with you via a call or please share your timeslots with us in below our mail id - [email protected] / [email protected].

Meanwhile, could you please modify the below file in your repo with testInvalidYamlFile: "validFile"and run the job again -

Thanks!

[ProGHAzure]

It already has this in the yamlFileVAlidatortest/invalidFile.yaml

Thanks

[v-sudkharat]

@ProGHAzure, Correct, as per the error message - | Conversion from JSON failed with error: Unterminated string. Expected delimiter: ". Path 'testInvalidYamlFile', you can add close double quotes by adding " in thetestInvalidYamlFile: "validFile and update it.

Old file is having -testInvalidYamlFile: "validFile

Update with - testInvalidYamlFile: "validFile"

And then check the deployment. Please let us know if you still get deployment failure after update that file.

Thanks!

[ProGHAzure]

If i try to edit the file and add "valid file" and commit it fails deployment and reverts with the same message.

What i dont understand is this is just the Azure\Sentinel synced from the master repository with no changes?

[v-sudkharat]

Hi @ProGHAzure, We have just go through you deployment file, and based on that we have requested to add "" in above mentioned file. We have revisited your repo to check that issue but it not available for us -

Thanks!

[ProGHAzure]

Ok I have just invited you thanks.

It looks like the invalidtestfile.yaml has the "" added now but the deployment still fails

[v-sudkharat]

Hi @ProGHAzure, Thank you for providing repo access. We have made modification in the below file by adding "" in your repo and re-run the job. Currently job is in running stage, please let us know once it done.

Thanks!

[ProGHAzure]

Looks like its still failing after trying to sync.

[v-sudkharat]

@ProGHAzure, we have updated another below file, based on the Job-error message-

[ProGHAzure]

@v-sudkharat , all sync jobs are failing. all I have done was sync the Azure-Sentinel repo I have made no changes or updates to any of the code wo why is this happening?

[v-sudkharat]

Hi @ProGHAzure, We have go through your sync Azure-Sentinel Repo and check the deployment file - .github/workflows/azure-sentinel-deploy-4fb7a97e-a915-4de7-92a4-b41a5343e482.ps1 which run the deployment. But when this script executes into the pipeline it will check the standalone yaml file content and deploy it. As of now we have resolve the 2 errors - 1. Expected delimiter: ". Path 'testInvalidYamlFile', and 2. "empty string" error for crowdstrick playbook which is highlighted in this screenshot-https://github.com/Azure/Azure-Sentinel/issues/9876#issuecomment-1926847022 Currently the recent deployment get failed due to it try to deploy the Sample data file which you can see in deployment workflow line no- 8987.

So, could you please let us know is the Sample data folder deployment required or it can be skip? If you skip that folder the script will move to next ARM template deployment files which like in below screenshot -

Thanks!

[ProGHAzure]

ah yes please skip it, I dont need that thanks!

[v-sudkharat]

Hi @ProGHAzure, We have modified the workflow file to skip the Sample data folder-

just want to check, only Sample data folder you want to skip, and other content want to deploy?

[ProGHAzure]

I want to sync in general - playbooks, analytics & automation rules. sample data can be skipped.

Thanks

[v-sudkharat]

@ProGHAzure, can you please update your script/workflow file accordingly. Currently it run in entire repo which also contains the undeployable yaml file. Ex. in sample data folder, due to that the deployment get failure every different steps. If you check on below screenshot, the playbook get successfully deployment -

but it gets failure other unwanted contains-

Thanks!

[v-muuppugund]

Hi @ProGHAzure ,Can we have a teams meeting ,could you please share couple of time slots to ([email protected]) as having queries,

[ProGHAzure]

Yes thank you I will email you now. thanks

[v-sudkharat]

Hi @ProGHAzure, We still working on it, and will update you over GitHub or Chat. Thanks!

[ProGHAzure]

Great thank you.

Ian Rawlinson Information Security Analyst TimeZone UTC+0

@.***http://www.prodirectsport.com/ PRO:DIRECT SPORT LTD Torre House, Shaldon Road, Newton Abbot, Devon TQ12 4PQ

This e-mail message may contain confidential or legally privileged information and is intended only for the use of the intended recipient(s). Any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is prohibited. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, or contain viruses. Anyone who communicates with us by e-mail is deemed to have accepted these risks. Pro:Direct Sport is not responsible for errors or omissions in this message and denies any responsibility for any damage arising from the use of e-mail. Any opinion and other statement contained in this message and any attachment are solely those of the author and do not necessarily represent those of the company.

From: v-sudkharat @.> Sent: Tuesday, February 20, 2024 10:51 AM To: Azure/Azure-Sentinel @.> Cc: IT Security @.>; Mention @.> Subject: Re: [Azure/Azure-Sentinel] Content failed to deploy (Issue #9876)

Hi @ProGHAzurehttps://github.com/ProGHAzure, We still working on it, and will update you over GitHub or Chat. Thanks!

— Reply to this email directly, view it on GitHubhttps://github.com/Azure/Azure-Sentinel/issues/9876#issuecomment-1953949659, or unsubscribehttps://github.com/notifications/unsubscribe-auth/BFLQTEJJD3DF73T6LW2DEWLYUR5X5AVCNFSM6AAAAABCTJCWG2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSNJTHE2DSNRVHE. You are receiving this because you were mentioned.Message ID: @.@.>>

[v-sudkharat]

Hi @ProGHAzure, Can we connect tomorrow via a call? we need to verify the selected content for deployment in your workspace. Thanks!

[ProGHAzure]

Hi Sudkharart,

Yes indeed please send a teams call over , afternoon gmt is better between 14:00-5pm ideally.

Thanks

Sent from Outlook for iOShttps://aka.ms/o0ukef

---

From: v-sudkharat @.> Sent: Monday, March 4, 2024 3:20:43 PM To: Azure/Azure-Sentinel @.> Cc: IT Security @.>; Mention @.> Subject: Re: [Azure/Azure-Sentinel] Content failed to deploy (Issue #9876)

Hi @ProGHAzurehttps://github.com/ProGHAzure, Can we connect tomorrow via a call? we need to verify the selected content for deployment in your workspace. Thanks!

— Reply to this email directly, view it on GitHubhttps://github.com/Azure/Azure-Sentinel/issues/9876#issuecomment-1976827083, or unsubscribehttps://github.com/notifications/unsubscribe-auth/BFLQTELABRCVBX4BQ7OOYMLYWSGMXAVCNFSM6AAAAABCTJCWG2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSNZWHAZDOMBYGM. You are receiving this because you were mentioned.Message ID: @.***>

[v-sudkharat]

Hi @ProGHAzure, we have reach out to our concerned team for this issue, once we receive an update on this from our team, we will update you.

Thanks!

[v-sudkharat]

Hi @ProGHAzure, We have received the update from our concern team, For the deployment the content requires in the ARM template format into the repo, and the Sentinel repo which you have fork is having different formats. Sharing the doc for your reference- MS doc - https://learn.microsoft.com/en-us/azure/sentinel/ci-cd-custom-deploy?tabs=github Sample repo - https://github.com/SentinelCICD/RepositoriesSampleContent

Thanks!

[v-sudkharat]

Hey @ProGHAzure, Any questions/concern on above comment. If nothing from your end, please let us know, so we can close this issue from GitHub. Thanks!

[ProGHAzure]

Yes please close, I understand how I can sync what I need now.

Thank you for all your assistance.

Ian Rawlinson Information Security Analyst TimeZone UTC+0

@.***http://www.prodirectsport.com/ PRO:DIRECT SPORT LTD Torre House, Shaldon Road, Newton Abbot, Devon TQ12 4PQ

This e-mail message may contain confidential or legally privileged information and is intended only for the use of the intended recipient(s). Any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is prohibited. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, or contain viruses. Anyone who communicates with us by e-mail is deemed to have accepted these risks. Pro:Direct Sport is not responsible for errors or omissions in this message and denies any responsibility for any damage arising from the use of e-mail. Any opinion and other statement contained in this message and any attachment are solely those of the author and do not necessarily represent those of the company.

From: v-sudkharat @.> Sent: Wednesday, March 20, 2024 9:42 AM To: Azure/Azure-Sentinel @.> Cc: IT Security @.>; Mention @.> Subject: Re: [Azure/Azure-Sentinel] Content failed to deploy (Issue #9876)

Hi @ProGHAzurehttps://github.com/ProGHAzure, We have received the update from our concern team, For the deployment the content requires in the ARM template format into the repo, and the Sentinel repo which you have fork is having different formats. Sharing the doc for your reference- MS doc - https://learn.microsoft.com/en-us/azure/sentinel/ci-cd-custom-deploy?tabs=github Sample repo - https://github.com/SentinelCICD/RepositoriesSampleContent

Thanks!

— Reply to this email directly, view it on GitHubhttps://github.com/Azure/Azure-Sentinel/issues/9876#issuecomment-2009138413, or unsubscribehttps://github.com/notifications/unsubscribe-auth/BFLQTEJQD54ZMSCGR5NVTJTYZFKWHAVCNFSM6AAAAABCTJCWG2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDAMBZGEZTQNBRGM. You are receiving this because you were mentioned.Message ID: @.@.>>

[v-sudkharat]

@ProGHAzure, Thanks for the confirmation. Closing this issue. If you still need support for this issue, feel free to re-open it any time. Thank you for your co-operation.