Merge pull request #14057 from dxniro/fix/blacklens-parsejson-securedata

Fix Blacklens Validate_JSON invalid secureData configuration

Author: v-atulyadav

Solutions/Blacklens/Data Connectors/deployment/azuredeploy_blacklens.json

@@ -242,8 +242,7 @@
               "runtimeConfiguration": {
                 "secureData": {
                   "properties": [
-                    "inputs",
-                    "outputs"
+                    "inputs"
                   ]
                 }
               }

Solutions/Blacklens/Data/Solution_Blacklens.json

@@ -10,7 +10,7 @@
     "Analytic Rules/blacklensInsights.yaml"
   ],
   "BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\Blacklens",
-  "Version": "3.0.1",
+  "Version": "3.0.2",
   "Metadata": "SolutionMetadata.json",
   "TemplateSpec": false,
   "Is1PConnector": false

Solutions/Blacklens/Package/3.0.2.zip

@@ -33,7 +33,7 @@
     "email": "support@blacklens.io",
     "_email": "[variables('email')]",
     "_solutionName": "Blacklens",
-    "_solutionVersion": "3.0.1",
+    "_solutionVersion": "3.0.2",
     "solutionId": "snapsecgmbh1733575353555.blacklens-sentinel-solution",
     "_solutionId": "[variables('solutionId')]",
     "uiConfigId1": "blacklens_io",
@@ -64,7 +64,7 @@
         "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
       ],
       "properties": {
-        "description": "Blacklens data connector with template version 3.0.1",
+        "description": "Blacklens data connector with template version 3.0.2",
         "mainTemplate": {
           "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
           "contentVersion": "[variables('dataConnectorVersion1')]",
@@ -347,7 +347,7 @@
         "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
       ],
       "properties": {
-        "description": "blacklensInsights_AnalyticalRules Analytics Rule with template version 3.0.1",
+        "description": "blacklensInsights_AnalyticalRules Analytics Rule with template version 3.0.2",
         "mainTemplate": {
           "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
           "contentVersion": "[variables('analyticRuleObject1').analyticRuleVersion1]",
@@ -412,18 +412,18 @@
                   "aggregationKind": "AlertPerResult"
                 },
                 "alertDetailsOverride": {
-                  "alertSeverityColumnName": "AlertSeverity",
+                  "alertDisplayNameFormat": "{{alert_title}}",
                   "alertDescriptionFormat": "{{message}}",
-                  "alertDisplayNameFormat": "{{alert_title}}"
+                  "alertSeverityColumnName": "AlertSeverity"
                 },
                 "incidentConfiguration": {
-                  "createIncident": true,
                   "groupingConfiguration": {
                     "lookbackDuration": "PT5H",
+                    "enabled": false,
                     "reopenClosedIncident": false,
-                    "matchingMethod": "AllEntities",
-                    "enabled": false
-                  }
+                    "matchingMethod": "AllEntities"
+                  },
+                  "createIncident": true
                 }
               }
             },
@@ -474,7 +474,7 @@
       "apiVersion": "2023-04-01-preview",
       "location": "[parameters('workspace-location')]",
       "properties": {
-        "version": "3.0.1",
+        "version": "3.0.2",
         "kind": "Solution",
         "contentSchemaVersion": "3.0.0",
         "displayName": "Blacklens",
@@ -517,7 +517,7 @@
           ]
         },
         "firstPublishDate": "2025-12-31",
-        "lastPublishDate": "2026-03-30",
+        "lastPublishDate": "2026-04-13",
         "providers": [
           "snapSEC GmbH"
         ],

Solutions/Blacklens/Package/mainTemplate.json

@@ -1,4 +1,5 @@
 | **Version** | **Date Modified (DD-MM-YYYY)** | **Change History**                          |
 |-------------|--------------------------------|---------------------------------------------|
+| 3.0.2       | 13-04-2026                     | Fix invalid secureData on ParseJson action. |
 | 3.0.1       | 30-03-2026                     | Bug fix.                                    |
 | 3.0.0       | 16-02-2026                     | Initial Solution Release.                   |

Solutions/Blacklens/ReleaseNotes.md

@@ -2,7 +2,7 @@
   "publisherId": "snapsecgmbh1733575353555",
   "offerId": "blacklens-sentinel-solution",
   "firstPublishDate": "2025-12-31",
-  "lastPublishDate": "2026-03-30",
+  "lastPublishDate": "2026-04-13",
   "providers": ["snapSEC GmbH"],
   "categories": {
     "domains": ["Security - Threat Intelligence"]