sentinel extension - `'automation-rule' is misspelled or not recognized by the system.`

[aaroniz-ms]

Describe the bug

It appears that the automation-rule module is not functioning as expected, despite being listed in the official documentation.

When typing the following, the module does not appear:

az sentinel -h

output:

Group
    az sentinel : Manage Security Insight.

Subgroups:
    action              [Experimental] : Sentinel action.
    alert-rule          [Experimental] : Sentinel alert-rule.
    alert-rule-template [Experimental] : Sentinel alert-rule-template.
    bookmark            [Experimental] : Sentinel bookmark.
    data-connector      [Experimental] : Sentinel data-connector.
    incident            [Experimental] : Sentinel incident.
    incident-comment    [Experimental] : Sentinel incident-comment.

Related command

By running the following you could reproduce the issue:

az sentinel automation-rule

you'd get a response of:

'automation-rule' is misspelled or not recognized by the system.

Errors

'automation-rule' is misspelled or not recognized by the system.

Issue script & Debug output

cli.knack.cli: Command arguments: ['sentinel', 'automation-rule', '--debug']
cli.knack.cli: __init__ debug log:
Enable color in terminal.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x00000232A3A2B380>, <function OutputProducer.on_global_arguments at 0x00000232A3DCC220>, <function CLIQuery.on_global_arguments at 0x00000232A3DF1620>]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Modules found from index for 'sentinel': ['azext_sentinel']
cli.azure.cli.core: Loading command modules:
cli.azure.cli.core: Name                  Load Time    Groups  Commands
cli.azure.cli.core: Total (0)                 0.000         0         0
cli.azure.cli.core: These extensions are not installed and will be skipped: ['azext_ai_examples', 'azext_next']
cli.azure.cli.core: Loading extensions:
cli.azure.cli.core: Name                  Load Time    Groups  Commands  Directory
cli.azure.cli.core: sentinel                  0.016         8        27  C:\Users\***
cli.azure.cli.core: Total (1)                 0.016         8        27
cli.azure.cli.core: Loaded 8 groups, 27 commands.
cli.azure.cli.core: Could not find a match in the command or command group table for 'sentinel automation-rule'. The index may be outdated.     
cli.azure.cli.core: Loading all modules and extensions
cli.azure.cli.core: Discovered command modules: ['acr', 'acs', 'advisor', 'ams', 'apim', 'appconfig', 'appservice', 'aro', 'backup', 'batch', 'batchai', 'billing', 'botservice', 'cdn', 'cloud', 'cognitiveservices', 'compute_recommender', 'computefleet', 'config', 'configure', 'consumption', 'container', 'containerapp', 'cosmosdb', 'databoxedge', 'dls', 'dms', 'eventgrid', 'eventhubs', 'extension', 'feedback', 'find', 'hdinsight', 'identity', 'interactive', 'iot', 'keyvault', 'lab', 'managedservices', 'maps', 'marketplaceordering', 'monitor', 'mysql', 'netappfiles', 'network', 'policyinsights', 'privatedns', 'profile', 'rdbms', 'redis', 'relay', 'resource', 'role', 'search', 'security', 'servicebus', 'serviceconnector', 'servicefabric', 'signalr', 'sql', 'sqlvm', 'storage', 'synapse', 'util', 'vm']
cli.azure.cli.core: Loading command modules:
cli.azure.cli.core: Name                  Load Time    Groups  Commands
cli.azure.cli.core: acr                       0.539        36       149
cli.azure.cli.core: acs                       0.042        15        79
cli.azure.cli.core: advisor                   0.005         3         6
cli.azure.cli.core: ams                       0.006        22       100
cli.azure.cli.core: apim                      0.014        14        69
cli.azure.cli.core: appconfig                 0.006         9        47
cli.azure.cli.core: appservice                0.043        80       277
cli.azure.cli.core: aro                       0.026         1        10
cli.azure.cli.core: backup                    0.006        16        60
cli.azure.cli.core: batch                     0.079        32        96
cli.azure.cli.core: batchai                   0.006        10        30
cli.azure.cli.core: billing                   0.029        19        53
cli.azure.cli.core: botservice                0.006        12        42
cli.azure.cli.core: cdn                       0.239         8        50
cli.azure.cli.core: cloud                     0.004         1         7
cli.azure.cli.core: cognitiveservices         0.004        10        33
cli.azure.cli.core: compute_recommender       0.011         1         1
cli.azure.cli.core: computefleet              0.018         1         1
cli.azure.cli.core: config                    0.004         2         7
cli.azure.cli.core: configure                 0.004         2         5
cli.azure.cli.core: consumption               0.039         8         9
cli.azure.cli.core: container                 0.021         2        17
cli.azure.cli.core: containerapp              0.194        37       123
cli.azure.cli.core: cosmosdb                  0.016        58       200
cli.azure.cli.core: databoxedge               0.019         5        28
cli.azure.cli.core: dls                       0.004         6        36
cli.azure.cli.core: dms                       0.004         3        22
cli.azure.cli.core: eventgrid                 0.007        25        96
cli.azure.cli.core: eventhubs                 0.028        14        21
cli.azure.cli.core: extension                 0.003         1         7
cli.azure.cli.core: feedback                  0.002         1         2
cli.azure.cli.core: find                      0.003         1         1
cli.azure.cli.core: hdinsight                 0.014         9        42
cli.azure.cli.core: identity                  0.004         2        11
cli.azure.cli.core: interactive               0.002         1         1
cli.azure.cli.core: iot                       0.131        19        82
cli.azure.cli.core: keyvault                  0.008        20       113
cli.azure.cli.core: lab                       0.116         9        30
cli.azure.cli.core: managedservices           0.016         3         8
cli.azure.cli.core: maps                      0.004         5        13
cli.azure.cli.core: marketplaceordering       0.012         1         2
cli.azure.cli.core: monitor                   0.353        18        61
cli.azure.cli.core: mysql                     0.198        16        56
cli.azure.cli.core: netappfiles               0.087         8        17
cli.azure.cli.core: network                   0.091       104       346
cli.azure.cli.core: policyinsights            0.022         9        17
cli.azure.cli.core: privatedns                0.046        14        60
cli.azure.cli.core: profile                   0.006         2         8
cli.azure.cli.core: rdbms                     0.127        53       223
cli.azure.cli.core: redis                     0.006         7        38
cli.azure.cli.core: relay                     0.055         7         8
cli.azure.cli.core: resource                  0.021        52       232
cli.azure.cli.core: role                      0.006        17        62
cli.azure.cli.core: search                    0.016         7        19
cli.azure.cli.core: security                  0.022        48        98
cli.azure.cli.core: servicebus                0.019        13        17
cli.azure.cli.core: serviceconnector          0.037        20       323
cli.azure.cli.core: servicefabric             0.030        27        80
cli.azure.cli.core: signalr                   0.005        10        42
cli.azure.cli.core: sql                       0.020        56       215
cli.azure.cli.core: sqlvm                     0.039         4        20
cli.azure.cli.core: storage                   0.168        60       275
cli.azure.cli.core: synapse                   0.016        54       246
cli.azure.cli.core: util                      0.003         3         7
cli.azure.cli.core: vm                        0.128        59       267
cli.azure.cli.core: Total (65)                3.255      1192      4723
cli.azure.cli.core: Loading extensions:
cli.azure.cli.core: Name                  Load Time    Groups  Commands  Directory
cli.azure.cli.core: sentinel                  0.002         8        27  C:\Users\***
cli.azure.cli.core: Total (1)                 0.002         8        27
cli.azure.cli.core: Loaded 1186 groups, 4750 commands.
cli.azure.cli.core: Updated command index in 0.004 seconds.
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x00000232A608B420>]        
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to 'C:\Users\***
az_command_data_logger: command args: sentinel {} --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument.<locals>.add_subscription_parameter at 0x00000232A60B3D80>]
cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument.<locals>.add_ids_arguments at 0x00000232A615A5C0>, <function register_cache_arguments.<locals>.add_cache_arguments at 0x00000232A615A700>, <function register_upcoming_breaking_change_info.<locals>.update_breaking_change_info at 0x00000232A615A7A0>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs [<function _documentdb_deprecate at 0x00000232A926E020>]
urllib3.connectionpool: Starting new HTTPS connection (1): app.aladdin.microsoft.com:443
urllib3.connectionpool: https://app.aladdin.microsoft.com:443 "GET /api/v1.0/suggestions?query=%7B%22command%22%3A+%22sentinel+automation-rule***" 200 None
cli.azure.cli.core.azclierror: NoneType: None

cli.azure.cli.core.azclierror: 'automation-rule' is misspelled or not recognized by the system.
az_command_data_logger: 'automation-rule' is misspelled or not recognized by the system.

Examples from AI knowledge base:
https://aka.ms/cli_ref
Read more about the command in reference docs
cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x00000232A608B6A0>]
az_command_data_logger: exit code: 2
cli.__main__: Command ran in 4.169 seconds (init: 0.364, invoke: 3.804)
telemetry.main: Begin splitting cli events and extra events, total events: 1
telemetry.client: Accumulated 0 events. Flush the clients.
telemetry.main: Finish splitting cli events and extra events, cli events: 1
telemetry.save: Save telemetry record of length 3879 in cache file under C:\Users\***
telemetry.main: Begin creating telemetry upload process.
telemetry.process: Creating upload process: "C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe C:\Program 
telemetry.process: Return from creating process 26060
telemetry.main: Finish creating telemetry upload process.

Expected behavior

To work as expected/ described in the docs.

Environment Summary

azure-cli 2.71.0

core 2.71.0
telemetry 1.1.0

Extensions:
sentinel 0.1.2

Dependencies:
msal 1.31.2b1
azure-mgmt-resource 23.1.1

Python location 'C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe'
Config directory 'C:\Users*.azure'
Extensions directory 'C:\Users*.azure\cliextensions'

Python (Windows) 3.12.8 (tags/v3.12.8:2dc476b, Dec 3 2024, 19:30:04) [MSC v.1942 64 bit (AMD64)]

Legal docs and information: aka.ms/AzureCliLegal

Your CLI is up-to-date.

Additional context

No response

[yonzhan]

Thank you for opening this issue, we will look into it.

[elmolinnell]

I am seeing a very similar issue with the az sentinel watchlist list -g <Resource Group> -w <Work space name>.

cli.knack.cli: Command arguments: ['sentinel', 'watchlist', 'list', '-g', 'xxxxxxxxxxxx', '-w', 'xxxxxxxxxxxxxx', '--debug']
cli.knack.cli: __init__ debug log:
Enable color in terminal.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x0000029B89DEF2E0>, <function OutputProducer.on_global_arguments at 0x0000029B8A18C180>, <function CLIQuery.on_global_arguments at 0x0000029B8A1AD580>]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Modules found from index for 'sentinel': ['azext_sentinel']
cli.azure.cli.core: Loading command modules:
cli.azure.cli.core: Name                  Load Time    Groups  Commands
cli.azure.cli.core: Total (0)                 0.000         0         0
cli.azure.cli.core: These extensions are not installed and will be skipped: ['azext_ai_examples', 'azext_next']
cli.azure.cli.core: Loading extensions:
cli.azure.cli.core: Name                  Load Time    Groups  Commands  Directory
cli.azure.cli.core: sentinel                  0.005         8        27  C:\Users\xxxxxxxxxxxx\.azure\cliextensions\sentinel
cli.azure.cli.core: Total (1)                 0.005         8        27  
cli.azure.cli.core: Loaded 8 groups, 27 commands.
cli.azure.cli.core: Could not find a match in the command or command group table for 'sentinel watchlist list'. The index may be outdated.
cli.azure.cli.core: Loading all modules and extensions
cli.azure.cli.core: Discovered command modules: ['acr', 'acs', 'advisor', 'ams', 'apim', 'appconfig', 'appservice', 'aro', 'backup', 'batch', 'batchai', 'billing', 'botservice', 'cdn', 'cloud', 'cognitiveservices', 'compute_recommender', 'computefleet', 'config', 'configure', 'consumption', 'container', 'containerapp', 'cosmosdb', 'databoxedge', 'dls', 'dms', 'eventgrid', 'eventhubs', 'extension', 'feedback', 'find', 'hdinsight', 'identity', 'interactive', 'iot', 'keyvault', 'lab', 'managedservices', 'maps', 'marketplaceordering', 'monitor', 'mysql', 'netappfiles', 'network', 'policyinsights', 'privatedns', 'profile', 'rdbms', 'redis', 'relay', 'resource', 'role', 'search', 'security', 'servicebus', 'serviceconnector', 'servicefabric', 'signalr', 'sql', 'sqlvm', 'storage', 'synapse', 'util', 'vm']
cli.azure.cli.core: Loading command modules:
cli.azure.cli.core: Name                  Load Time    Groups  Commands
cli.azure.cli.core: acr                       0.429        36       149
cli.azure.cli.core: acs                       0.020        15        79
cli.azure.cli.core: advisor                   0.002         3         6
cli.azure.cli.core: ams                       0.004        22       100
cli.azure.cli.core: apim                      0.006        14        69
cli.azure.cli.core: appconfig                 0.004         9        47
cli.azure.cli.core: appservice                0.023        80       277
cli.azure.cli.core: aro                       0.011         1        10
cli.azure.cli.core: backup                    0.003        16        60
cli.azure.cli.core: batch                     0.043        32        96
cli.azure.cli.core: batchai                   0.002        10        30
cli.azure.cli.core: billing                   0.015        19        53
cli.azure.cli.core: botservice                0.003        12        42
cli.azure.cli.core: cdn                       0.133         8        50
cli.azure.cli.core: cloud                     0.002         1         7
cli.azure.cli.core: cognitiveservices         0.002        10        33
cli.azure.cli.core: compute_recommender       0.003         1         1
cli.azure.cli.core: computefleet              0.009         1         1
cli.azure.cli.core: config                    0.002         2         7
cli.azure.cli.core: configure                 0.001         2         5
cli.azure.cli.core: consumption               0.019         8         9
cli.azure.cli.core: container                 0.010         2        17
cli.azure.cli.core: containerapp              0.096        37       123
cli.azure.cli.core: cosmosdb                  0.010        58       200
cli.azure.cli.core: databoxedge               0.009         5        28
cli.azure.cli.core: dls                       0.002         6        36
cli.azure.cli.core: dms                       0.002         3        22
cli.azure.cli.core: eventgrid                 0.003        25        96
cli.azure.cli.core: eventhubs                 0.013        14        21
cli.azure.cli.core: extension                 0.002         1         7
cli.azure.cli.core: feedback                  0.001         1         2
cli.azure.cli.core: find                      0.001         1         1
cli.azure.cli.core: hdinsight                 0.007         9        42
cli.azure.cli.core: identity                  0.007         2         7
cli.azure.cli.core: interactive               0.001         1         1
cli.azure.cli.core: iot                       0.068        19        82
cli.azure.cli.core: keyvault                  0.036        20       114
cli.azure.cli.core: lab                       0.030         9        30
cli.azure.cli.core: managedservices           0.010         3         8
cli.azure.cli.core: maps                      0.002         5        13
cli.azure.cli.core: marketplaceordering       0.003         1         2
cli.azure.cli.core: monitor                   0.204        18        64
cli.azure.cli.core: mysql                     0.104        16        56
cli.azure.cli.core: netappfiles               0.042         8        15
cli.azure.cli.core: network                   0.054       106       352
cli.azure.cli.core: policyinsights            0.013         9        17
cli.azure.cli.core: privatedns                0.018        14        60
cli.azure.cli.core: profile                   0.002         2         8
cli.azure.cli.core: rdbms                     0.065        52       217
cli.azure.cli.core: redis                     0.002         7        38
cli.azure.cli.core: relay                     0.026         7         8
cli.azure.cli.core: resource                  0.012        52       232
cli.azure.cli.core: role                      0.002        17        62
cli.azure.cli.core: search                    0.009         7        19
cli.azure.cli.core: security                  0.010        48        98
cli.azure.cli.core: servicebus                0.009        13        17
cli.azure.cli.core: serviceconnector          0.029        20       331
cli.azure.cli.core: servicefabric             0.013        27        80
cli.azure.cli.core: signalr                   0.003        10        42
cli.azure.cli.core: sql                       0.011        56       215
cli.azure.cli.core: sqlvm                     0.017         4        20
cli.azure.cli.core: storage                   0.090        60       275
cli.azure.cli.core: synapse                   0.008        54       246
cli.azure.cli.core: util                      0.003         3         7
cli.azure.cli.core: vm                        0.056        59       262
cli.azure.cli.core: Total (65)                1.851      1193      4724
cli.azure.cli.core: Loading extensions:
cli.azure.cli.core: Name                  Load Time    Groups  Commands  Directory
cli.azure.cli.core: sentinel                  0.002         8        27  C:\Users\xxxxxxxxxxxxx\.azure\cliextensions\sentinel
cli.azure.cli.core: Total (1)                 0.002         8        27
cli.azure.cli.core: Loaded 1187 groups, 4751 commands.
cli.azure.cli.core: Updated command index in 0.003 seconds.
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x0000029B8C47EE80>]
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to 'C:\Users\xxxxxxxxxx\.azure\commands\2025-07-11.15-43-33.sentinel.11920.log'.       
az_command_data_logger: command args: sentinel {} {} -g {} -w {} --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument.<locals>.add_subscription_parameter at 0x0000029B8C4A3740>]
cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument.<locals>.add_ids_arguments at 0x0000029B8C539F80>, <function register_cache_arguments.<locals>.add_cache_arguments at 0x0000029B8C53A0C0>, <function register_upcoming_breaking_change_info.<locals>.update_breaking_change_info at 0x0000029B8C53A160>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs [<function _documentdb_deprecate at 0x0000029B8F6CE660>]
cli.azure.cli.core.command_recommender: "-g" is an invalid parameter for command "sentinel watchlist".
cli.azure.cli.core.command_recommender: "-w" is an invalid parameter for command "sentinel watchlist".
urllib3.connectionpool: Starting new HTTPS connection (1): app.aladdin.microsoft.com:443
urllib3.connectionpool: https://app.aladdin.microsoft.com:443 "GET /api/v1.0/suggestions?query=%7B%22command%22%3A+%22sentinel+watchlist%22%2C+%22parameters%22%3A+%22%22%7D&clientType=AzureCli&context=%7B%22versionNumber%22%3A+%222.75.0%22%2C+%22errorType%22%3A+%22UnknownSubcommand%22%2C+%22correlationId%22%3A+%22e6498808-53f3-4036-a6dd-c936b783c7e5%22%2C+%22subscriptionId%22%3A+%22621f04dc-c3fa-46bb-a593-94424b01970b%22%2C+%22eventId%22%3A+%22c633f066-2c34-49b1-a027-3659d3958b0d%22%7D HTTP/1.1" 200 None
cli.azure.cli.core.command_recommender: "-g" is an invalid parameter for command "sentinel watchlist".
cli.azure.cli.core.command_recommender: "-w" is an invalid parameter for command "sentinel watchlist".
cli.azure.cli.core.azclierror: NoneType: None

cli.azure.cli.core.azclierror: 'watchlist' is misspelled or not recognized by the system.
az_command_data_logger: 'watchlist' is misspelled or not recognized by the system.

Examples from AI knowledge base:
https://aka.ms/cli_ref
Read more about the command in reference docs
cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x0000029B8C47F100>]
az_command_data_logger: exit code: 2
cli.__main__: Command ran in 2.374 seconds (init: 0.374, invoke: 2.001)
telemetry.main: Begin splitting cli events and extra events, total events: 1
telemetry.client: Accumulated 0 events. Flush the clients.
telemetry.main: Finish splitting cli events and extra events, cli events: 1
telemetry.save: Save telemetry record of length 3882 in cache file under C:\Users\xxxxxxxxxx\.azure\telemetry\20250711154333874
telemetry.main: Begin creating telemetry upload process.
telemetry.process: Creating upload process: "C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe C:\Program Files\Microsoft SDKs\Azure\CLI2\Lib\site-packages\azure\cli\telemetry\__init__.pyc C:\Users\xxxxxxxxxx\.azure C:\Users\xxxxxxxxxx\.azure\telemetry\20250711154333874"
telemetry.process: Return from creating process 21508
telemetry.main: Finish creating telemetry upload process. 

Environment Summary
azure-cli 2.75.0

core 2.75.0
telemetry 1.1.0

Extensions:
sentinel 0.1.2