Workspace Usage Report Workbook: Query Comparison False Positives Fixed

What Changed

The Workspace Usage Report workbook v1.6.5 fixes false positive “Query Text is different” alerts in the Weekly Rules comparison. The logic now uses contains matching instead of exact string comparison to ignore trailing whitespace differences between Active Rules and Rule Templates.

Operational Impact

SOC teams using this workbook for rule validation were receiving false alerts when Active Rules had identical logic to their templates but different trailing whitespace. This created noise in rule compliance monitoring and required manual verification of legitimate matches.

The fix eliminates these false positives while preserving the ability to detect actual logic differences between deployed rules and their templates.

Affected Files

Workbooks/WorkspaceUsage.json