Issue

When trying to update managed Panther detections, the following error occurred:

... [('/path/to/detection.yml', AnalysisIDConflictException('Conflicting AnalysisID: [Pack.DetectionNameHere]'))]

Resolution

This AnalysisIDConflictException error indicates a duplicate of this rule was detected. To resolve this issue, find the duplicate and delete it. A command like the following can help find the offending file:

grep -ir --include="./rules/*" "Pack.DetectionNameHere"

Cause

This error occurs when a rule is duplicated within the scope of panther_analysis_tool.