wi-454109-uuf-custom-detail-key-does-not-contain

Author: sbreingold-ms

articles/sentinel/create-manage-use-automation-rules.md

@@ -4,7 +4,7 @@ description: This article explains how to create and use automation rules in Mic
 ms.topic: how-to
 author: batamig
 ms.author: bagol
-ms.date: 10/16/2024
+ms.date: 02/24/2026
 appliesto:
     - Microsoft Sentinel in the Microsoft Defender portal
     - Microsoft Sentinel in the Azure portal
@@ -244,6 +244,8 @@ Select **+ Add item condition**.
 
 In this example, if the incident has the custom detail *DestinationEmail*, and if the value of that detail is `[email protected]`, the actions defined in the automation rule will run.
 
+**Known limitation**: When using custom detail values, the **Does not contain** operator might fail to evaluate correctly when multiple (two or more) distinct values are present.
+
 ### Add actions
 
 Choose the actions you want this automation rule to take. Available actions include **Assign owner**, **Change status**, **Change severity**, **Add tags**, and **Run playbook**. You can add as many actions as you like.