Skip to content

Conversation

@ireydiak
Copy link

Summary:
Minor version update (v2.2.0) for the Flare Sentinel Solution.
This release fixes Analytic Rules that fail when columns don't exist yet, and introduces release notes to improve transparency around code changes..

Change(s):

  • Fixed Analytic Rules to use column_ifexists() for defensive querying
  • Fixed risk score comparisons (was comparing numbers to strings)
  • Added ReleaseNotes.md file

Reason for Change(s):

  • Resolves errors when creating Analytic Rules before data is ingested
  • Allows customers to enable rules immediately without waiting for data
  • Improves communication with customers via release notes

Version updated:
No

Testing Completed:

  • Created a custom deployment using the "Deploy custom template" in Azure and pasted the mainTemplate.yaml content generated by the createSolutionV3.ps1 utility script.
  • Validated Analytic Rules syntax in Microsoft Sentinel environment.
  • Confirmed Analytic Rules queries execute without errors.
  • Confirmed Workbook creation execute without errors.

Checked that the validations are passing and have addressed any issues that are present:

  • Yes

- Fixed Analytic Rules to use column_ifexists() for defensive querying
- Fixed risk score comparisons (was comparing numbers to strings)
- Added ReleaseNotes.md file
@ireydiak ireydiak changed the title Flare Solutions V2.2.0 Minor version update for the Flare Sentinel: V2.2.0 Dec 11, 2025
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

File autogenerated by the createSolutionV3.ps1 script.

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

File autogenerated by the createSolutionV3.ps1 script.

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

File autogenerated by the createSolutionV3.ps1 script.

Copy link
Author

@ireydiak ireydiak Dec 11, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Rule deleted because the field does not exist and no suitable replacement was found. Customers have also reported issues with this rule.

@ireydiak ireydiak closed this Dec 12, 2025
@ireydiak
Copy link
Author

I opened the same PR on the origin repo here: Azure#13301

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants