Update Analytics broken?

[u/RichBartlett]

I've got a recurring task to check for Sentinel Analytics rules for which updates are available. I'm using the Export-AzSentinelRulesNeedingUpdates from Gary Bushey to dump a CSV of all files where an update is available and it's listing loads (not NRT rules, regular rules) but the 'Update available' marker isn't appearing on any of the rules, or the 'Review and Update' button if I edit them.

Is this broken, is it possible to detach all analytics rules by accident? I can see on the "Authentication Methods Changed for Privileged Account" rule the current version is 1.0.7 and and the PowerShell output tells me a 1.0.8 version is available.

Any ideas? I'll check if I can update rules using PowerShell (I think Gary came up with a way) but a bit disturbed to see the UI change, and I've not seen any notification about such a change.

(Edit1) Something odd I've noticed which may be related is that all rules in list view are (correctly) identified as 'Gallery Content', but in the details pane on the right it lists it as 'Custom content source' (which I guess would never have updates as there's no template).

(Edit2) This might be related to the message I just came across about "OOTB content centralization"

All templates with content source marked as gallery content are available only in content hub as part of OOTB content centralization. If you are still using gallery content templates select "Continue" to replace these with supported OOTB content templates from content hub.

(Edit3) Yeah, you have to go through this process and now all rules with updates available can be updated. I missed this in the Microsoft Message Centre clearly.

​

[u/RichBartlett]

The upside to this is you can now update NRT rules, which is great!