Panther Analysis Tool reports an AnalysisIDConflictException
Last updated: September 3, 2024
Issue
When trying to update managed Panther detections, the following error occurred:
... [('/path/to/detection.yml', AnalysisIDConflictException('Conflicting AnalysisID: [Pack.DetectionNameHere]'))]Resolution
This AnalysisIDConflictException error indicates a duplicate of this rule was detected. To resolve this issue, find the duplicate and delete it. A command like the following can help find the offending file:
grep -ir --include="./rules/*" "Pack.DetectionNameHere"Cause
This error occurs when a rule is duplicated within the scope of panther_analysis_tool.