Skip to content

Commit 1e441a0

Browse files
committed
Fix ARM template expression brackets
Remove accidental double-bracket syntax in mainTemplate.json for the Playbook resource. The resource "name" and "parentId" properties were changed to use single-bracket ARM expressions (e.g. [concat(...)] and [variables(...)]) instead of the incorrect [[...]] form. Packaged artifact 3.0.0.zip was also updated.
1 parent c4e23a9 commit 1e441a0

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed
-4 Bytes
Binary file not shown.

Solutions/TacitRed-IOC-CrowdStrike/Package/mainTemplate.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -255,9 +255,9 @@
255255
{
256256
"type": "Microsoft.OperationalInsights/workspaces/providers/metadata",
257257
"apiVersion": "2022-01-01-preview",
258-
"name": "[[concat(parameters('workspace'),'/Microsoft.SecurityInsights/',concat('Playbook-', last(split(variables('playbookId1'),'/'))))]",
258+
"name": "[concat(parameters('workspace'),'/Microsoft.SecurityInsights/',concat('Playbook-', last(split(variables('playbookId1'),'/'))))]",
259259
"properties": {
260-
"parentId": "[[variables('playbookId1')]]",
260+
"parentId": "[variables('playbookId1')]",
261261
"contentId": "[variables('_playbookContentId1')]",
262262
"kind": "Playbook",
263263
"version": "[variables('playbookVersion1')]",

0 commit comments

Comments
 (0)