Skip to content

Conversation

@Aubeauch
Copy link

@Aubeauch Aubeauch commented Aug 1, 2025

This came up in an escalation. I modified the if statement

from:
'if ($item.Name -notin $watchlist.results.SearchKey -and $item.Workload -notin $watchlist.results.Workload)'

to:
'if ($item.Name -notin $watchlist.results.SearchKey)'

The reason for this change was the presence of the workload was preventing new analytics rules based on prior existing workloads to not run due to the watchlist lookup failing. We traced it back to this condition: "-and $item.Workload -notin $watchlist.results.Workload"

This came up in an escalation. I modified the if statement 

from:
'if ($item.Name -notin $watchlist.results.SearchKey -and $item.Workload -notin $watchlist.results.Workload)'

to:
'if ($item.Name -notin $watchlist.results.SearchKey)'

The reason for this change was the presence of the workload was preventing new analytics rules based on prior existing workloads to not run due to the watchlist lookup failing. We traced it back to this condition: "-and $item.Workload -notin $watchlist.results.Workload"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant