How do I resolve "AnalysisContainsDuplicatesException" when uploading a rule to Panther?

Last updated
Save as PDF

Issue

When trying to upload a rule using Panther Analysis Tool (PAT), the following error occurs:

Error: [root]: [('/home/github/rule.yml', AnalysisContainsDuplicatesException('Specification file for [rule] contains fields with duplicate values: [LowerTags, Tags]'))]

Resolution

To resolve this issue, please check for duplicate tags in your detection's YAML files and remove them.

Cause

This issue occurs when there are duplicate tags in your detection's YAML configuration files.