Getting Error while saving Analytics rule as "the provided 'productFilter' was not recognized as a valid product"

Disha Bodade 65

Team,

I am trying to Create Analytics Rule, Also created a Automation Rule with default options and created one playbook to run n action of that automation rule.

But while Saving the Analytics Rule, Sentinel through below error.

Failed to save analytics rule 'Threat_Detection_Anlytics_Rule'. BadRequest:One or more alert rule validations have failed. [The provided 'productFilter' was not recognized as a valid product]

But while creating Analytics Rule, there were no option like productFilter to set, also not at automation rule I set this parameter.

I am not sure, from where its taking this setting...

Thanks,

Disha

Akshay-MSFT 16,026 Reputation points Microsoft Employee

2024-03-12T10:42:29.35+00:00
@Disha Bodade

Thank you for posting your query on Microsoft Q&A, from above description I could understand that you are getting error while trying to create Analytics rule from sentinel. However to dig through this kindly share the following:

Template you have been using to create analytics rule.

Kusto Query you have been using.

Screenshot of the "rule logic", Incident settings and Automated response configuration if any.

Thanks,

Akshay Kaushik